KB484551: How to create a TLS-enabled DSN via the command line interface in MicroStrategy Intelligence Server Universal

Description 

To create an ODBC DSN in Strategy Intelligence Server Universal with TLS enabled, you can use the utility mstrconnectwiz command line mode. Starting in Strategy 2021, this command is available to create a DSN in silent mode. For normal usage with no TLS, please refer to KB42495.
 

Usage

Oracle

mstrconnectwiz -r ORCLW DataSourceName HostNAME (SID | -sname:ServiceName)(SID | -sname:ServiceName) PortNumber [-EnableSSL:1] [-ValidateServerCertificate:1] [-TrustStore:CERT_PATH] [-u:uid] [-p:pwd]

Redshift

mstrconnwiz [-r] RedShift DataSourceName HostNAME PortNumber DatabaseName [-EncryptionMethod:0/1] [-ValidateServerCertificate:0/1] [-TrustStore:path\to\cacerts.pem] [-HostNameInCertificate:1.2.3.4] [-u:uid] [-p:pwd]

SQL Server

mstrconnectwiz SQLSERVER DataSourceName HostName PortNumber DatabaseName [-EnableSSL:1] [-ValidateServerCertificate:1] [-TrustStore:CERT_PATH] [-u:uid] [-p:pwd]

PostreSQL

mstrconnectwiz POSTGRESQL DataSourceName HostName PortNumber DatabaseName [-EnableSSL:1] [-ValidateServerCertificate:1] [-TrustStore:CERT_PATH] [-u:uid] [-p:pwd]

Db2

mstrconnectwiz DB2 DataSourceName HostName DatabaseName PortNumber [-EnableSSL:1] [-ValidateServerCertificate:1] [-TrustStore:CERT_PATH] [-u:uid] [-p:pwd]

MongdoDB

mstrconnectwiz MONGODB DataSourceName HostName PortNumber MONGODB_CONFIG_FILE_PATH [-EnableSSL:1] [-ValidateServerCertificate:1] [-TrustStore:CERT_PATH] [-u:uid] [-p:pwd]

Teradata

mstrconnectwiz TERADATA DSN ServerName DatabaseName Unicode [-de:1]

Hive

mstrconnwiz [-r] HIVE DataSourceName 1 HostName PortNumber KerberosRealm KerberosHostFQDN KerberosServiceName DefaultStringColumnLength [DatabaseName] [-SSL:0/1] [-CAIssuedCertNamesMismatch:0/1] [-AllowSelfSignedServerCert:0/1] [-UseSystemTrustStore:0/1] [-CheckCertRevocation:0/1] [-TrustedCerts:path\to\cacerts.pem] [-u:uid] [-p:pwd]

Impala

mstrconnectwiz [-r] IMPALA DataSourceName 0 HostName PortNumber [-EnableSSL:1] [-AllowHostNameCNMismatch:1] [-AllowSelfSignedServerCert:1] [-u:uid] [-p:pwd]

Google BigQuery

mstrconnwiz [-r] GOOGLEBIGQUERY DataSourceName Token Catalog StrColumnLength EnableTPAPI[0/1] [-UseSystemTrustStore:0/1] [-TrustedCerts:path\to\cacerts.pem] [-u:uid] [-p:pwd]

Where

• r replaces a DSN if the DSN already exists
• u:uid provides the logonID to perform a test connection
• p:pwd provides the password to perform a test connection
• EnableSSL provide 1/0 to enable/disable the SSL
• ValidateServerCertificate provide 1/0 to validate server certificate. Only works when EnableSSL set to 1
• TrustStore provide truststore file path, essential when ValidateServerCertificate set to 1
• SSL same as EnableSSL
• TrustedCerts same as TrustStore
• de:1/0 provide Teradata specific to use DataEncryption

Examples

Example 1: Create or replace an Oracle DSN with TLS enabled

mstrconnectwiz -r ORCLW MstrConWizTLS x.x.x.x -sname:orclpdb 2484 -EnableSSL:1 -ValidateServerCertificate:1 -TrustStore:/iserver-install/BIN/Linux/bin/wallet.sso

Example 2: Create or replace an Hive DSN with TLS enabled

mstrconnectwiz HIVE HiveTLSSilent 0 x.x.x.x 10000 4000 default -EnableSSL:1 -AllowHostNameCNMismatch:1 -AllowSelfSignedServerCert:1 -u:hive -p:hive

Example 3: Create or replace an Teradata DSN with TLS enabled

mstrconnectwiz TERADATA TD_CW_slient_ASCII_EDY x.x.x.x -sc:0 -de:1 -r