Manage the secure connect bundle

The secure connect bundle is a zip file with connection credentials required for mutual TLS and your secure Astra connection. The secure connect bundle provides maximum security and allows your application to benefit from robust driver features (health check, load balancing, failover). The driver needs to keep up to date with the status of each node (availability, token range) to route the request to the proper nodes.

For a database deployed across multiple regions, there is one secure connect bundle per region. A separate secure connect bundle needs to be downloaded for each database region.

Secure connect bundle contents

The secure connect bundle contains the following files:

File Contents

ca.crt

DataStax’s Certificate Authority public certificate.

cert

A certificate, unique to the specific secure connect bundle.

key

A private key, unique to the specific secure connect bundle.

cert.pfx

A PFX formatted archive containing the certificate and the private key.

config.json

A configuration file with information on how to securely connect to the Astra DB instance associated with the secure connect bundle.

cqlshrc

A CQLSH profile containing CQL shell session settings.

identity.jks

A Java keystore file containing the aforementioned cert & key files.

trustStore.jks

A Java keystore file containing the aforementioned ca.crt.

Download the secure connect bundle

To get the necessary security credentials and certificates for connecting drivers to your Astra DB vector database, download the secure connect bundle from the DataStax Astra Portal.

  • Vector database

  • Non-vector database

If you’re using a vector Astra DB database, use the following instructions with the secure connect bundle.

  1. Open your Astra Portal and select your database.

  2. On the Overview page, go to Database Details and locate the Region section.

  3. Click the ellipsis (…​), and then select Download secure connect bundle.

  4. Copy or download the secure connect bundle, which is a ZIP file named secure-connect-<database_name>.zip.

If you’re using a non-vector Astra DB database, use the following instructions with the secure connect bundle.

  1. Open your Astra Portal and select your database.

  2. On the Overview page, select Connect.

  3. In the Database Essentials section, click Get Bundle.

  4. In the Secure Connect Bundle Download box, use the Select a region menu to select the region for which to download the bundle.

  5. To download the bundle to your local computer, click Download Secure Bundle.

If you have multiple regions, you can download a bundle for each region. The secure connect bundle downloads as a ZIP file named secure-connect-<database_name>.zip.

For added security, the download link for the secure connect bundle expires after five minutes. Once the download link expires, you must repeat the steps above to regenerate a new download link.

Note that the secure connect bundle itself never expires.

Share the secure connect bundle

Although teammates can access your Astra DB database, it doesn’t appear in their list of available databases under Databases in Astra Portal.

After you create an Astra DB database, give other team members the database credentials and connection details to access your database.

Be careful when sharing connection details. Providing this information to another user grants them access to your Astra DB database and ownership capabilities, such as making modifications to the database.

For security, delete downloaded connection credentials after sending them to your teammate.

Was this helpful?

Give Feedback

How can we improve the documentation?

© 2024 DataStax | Privacy policy | Terms of use

Apache, Apache Cassandra, Cassandra, Apache Tomcat, Tomcat, Apache Lucene, Apache Solr, Apache Hadoop, Hadoop, Apache Pulsar, Pulsar, Apache Spark, Spark, Apache TinkerPop, TinkerPop, Apache Kafka and Kafka are either registered trademarks or trademarks of the Apache Software Foundation or its subsidiaries in Canada, the United States and/or other countries. Kubernetes is the registered trademark of the Linux Foundation.

General Inquiries: +1 (650) 389-6000, info@datastax.com