PostgreSQL TLS configuration status for VCF Operations for Networks
Article ID: 404640
Updated On:
Products
Issue/Introduction
This article provides information regarding the support status and configuration requirements for TLS (Transport Layer Security) on localhost connections to the PostgreSQL database. VCF Operations for Networks utilizes a backend architecture that manages database security and connectivity through integrated services.
- By default, the localhost connections to the PostgreSQL database do not use TLS.
- To enable TLS, you have to either generate a self-signed certificate with OpenSSL or provide your own certificate.
- Attempts to manually configure TLS for PostgreSQL database connections.
- Security scans identify unencrypted localhost connections to PostgreSQL.
- Inquiries regarding the generation of self-signed certificates for database encryption.
Environment
VCF Operations for Networks
Cause
VCF Operations for Networks has migrated the core database architecture from PostgreSQL to FoundationDB. PostgreSQL is no longer utilized or supported as the primary database in current product releases.
Resolution
Manual configuration of TLS for PostgreSQL is not supported as the component is no longer a part of the active data path. All database operations and security protocols are now managed by FoundationDB.
Additional Information
- How to subscribe to Broadcom Knowledge Base articles
- For assistance with expired appliance certificates, refer to the product documentation regarding certificate management.
Feedback
