[Data Integration] Which CA certificate is needed for Data Movement gateway to connect S3 Target?

[HNAKAGAW]

Hi support

I want to create pipeline project.

[Environment]

Source : Oracle
Storage : Snowflake
Landing : AWS S3
Use Data Movement gateway Server

[Background of the Question]

"Qlik help" say that appropriate CA certificate is required to use S3.

"Qlik Data Gateway - Data Movement prerequisites"
https://help.qlik.com/en-US/cloud-services/Subsystems/Hub/Content/Sense_Hub/DataIntegration/TargetCo...

But I'm not sure exactly what documents are required.
Amazon provides several root CA certificates through Amazon Trust Services.
https://www.amazontrust.com/repository

[Question]

Which should I include in the trust store on my Data Movement gateway Server?
Are the below five certificate authorities sufficient?
- Amazon Root CA 1
- Amazon Root CA 2
- Amazon Root CA 3
- Amazon Root CA 4
- Starfield Services Root Certificate Authority

Or do I need to include in the trust store a completely different CA certificate?

Best Regards
Nakagawa

[Mohammed_Messaoudi · Accepted solution]

Hello Nakagawa,

For AWS S3 connections through the Data Movement gateway, you'll need to ensure the appropriate Amazon Trust Services root certificates are installed in your gateway's Java truststore. The five certificates you've identified are indeed the correct ones to include

[HNAKAGAW]

Hi Mohammed_Messaoudi

I understand.

Thank you for your answer.

Best Regards

Nakagawa