Secure Connect Bundle

The Secure Connect Bundle (SCB) is a zip file containing security credentials and certificates required for secure mutual TLS (mTLS) connection to your Astra DB database. The SCB establishes a secure external connection. Within Astra DB, the protocol SNI over TCP is used to contact each node independently.

Often, you use application tokens to establish a secure connection to your Astra DB databases. The SCB is a required or alternative connection method for certain components and integrations, including the following:

Download the Secure Connect Bundle

For security purposes, the SCB download link expires after five minutes. Once the download link expires, you must generate a new download link.

Once downloaded, the SCB never expires.

You can download an SCB in the Astra Portal or with the DevOps API.

Astra Portal
DevOps API
Astra CLI

Serverless (Vector) databases
Serverless (Non-Vector) databases

To download an SCB for a Serverless (Vector) database, do the following:

In the Astra Portal navigation menu, select your database.
On the Overview tab, locate the Database Details section, and then locate the Region section.
Click more_vert More, and then select Download SCB.

Multi-region databases have a different SCB for each region.
Download and save the SCB as an archive (zip file).

To download an SCB for a Serverless (Non-Vector) database, do the following:

In the Astra Portal navigation menu, select your database.
Click Connect.
In the Database Essentials section, click Get Bundle.
In the Secure Connect Bundle Download dialog, select the region for which to download the bundle.

Multi-region databases have a different SCB for each region.
Click Download Secure Bundle, and then save the SCB as an archive (zip file).

You can use the DevOps API to get a temporary URL to download the SCB for a specific database.

Send a POST request to the DevOps API secure bundle URL endpoint:
```
curl -sS --location -X POST "https://api.astra.datastax.com/v2/databases/DATABASE_ID/secureBundleURL?all=true" \
--header "Authorization: Bearer APPLICATION_TOKEN" \
--header "Accept: application/json"
```
Replace the following:
- DATABASE_ID: Your database ID
- APPLICATION_TOKEN: An application token with the Organization Administrator role.
  
  For multi-region databases and organizations with multiple custom domains, include all=true to get SCB download links for all regions and domains. This parameter is optional for single-region databases.
Use the download link in the response to download the SCB zip file.

You can use the Astra CLI to download a database’s SCB:

astra db download-scb DB_NAME

For multi-region databases, this command downloads the SCB for the database’s primary region. To download the SCB for a specific region, use the -r REGION_NAME option.

By default, the SCB zip files are downloaded to the directory where you run the command. To download the files to a different directory, include the -d DIRECTORY_PATH option.

For more information, run astra help db download-scb or see the Astra CLI documentation.

Use the Secure Connect Bundle

When you use an SCB to connect your apps and integrations to your database, you provide the entire SCB zip file.

Don’t extract the SCB archive unless you require a specific file or value from within the SCB for a particular integration or configuration.