Uninstalling CTE from the Teradata Cluster

The following procedure describes how to remove CTE from your Teradata cluster. Note that uninstalling CTE will unprotect the pdisk devices that CTE is protecting/encrypting. Because the data on the pdisks remain encrypted after uninstalling CTE, the entire clear-text data must be restored to the pdisks from backup. Therefore, you must have a full backup of your database to restore to your cluster before you uninstall CTE. See the Teradata Administration Guide or your Teradata Customer Support Representative for information about backing up your database in full.

You must be familiar with CTE operations for protecting Teradata clusters and IDT-Capable GuardPoints.

To uninstall CTE:

1. Make sure you have access to a full database backup so that you can restore your Teradata database after uninstalling CTE.

2. Shut down your Teradata database.

3. Use the secfsd -status guard command to view the full list of device GuardPoints guarded by CTE on each node of your cluster. From this information, create a consolidated list of GuardPoints with one entry per device in the consolidated list. Note that the devices accessed by the nodes in the same clique are shared devices on each node. The consolidated list must include all devices that are protected in your cluster.

4. Perform the following steps on the CipherTrust Manager:

   1. Click on the client group name associated with your Teradata cluster and then click the GuardPoints tab.

   2. Select the device names listed in GuardPoints table. The devices listed in GuardPoints table are the same devices listed in the consolidated list of devices compiled in step 3.

   3. Disable the selected device GuardPoints on all nodes in the cluster.

   4. Wait for device status to change from green circle to red circle in the Status column for all the selected devices.

   5. Select the same devices.

   6. Click Unguard to remove the selected device GuardPoints on all nodes in the cluster.

5. Perform the following steps on one of the nodes of every clique in your cluster:

   1. Run the voradmin idt delete command to delete the IDT-Capable GuardPoint configuration recorded for each device. This command automatically deletes the GuardPoint configuration across the nodes in the same clique.

       voradmin idt delete <device name>
      

   2. Repeat the previous step on the other devices in your cluster, if any.

6. Go back to the Key Manager and do the following:

   1. Select the Metadata Directory GuardPoint in the GuardPoints table of the same host group.

   2. Click Disable to disable the Metadata GuardPoint directory on every node in the cluster.

   3. Select the Metadata Directory GuardPoint in the GuardPoints table again and then click Unguard to remove the Metadata Directory GuardPoint on all the nodes in the cluster.

7. On every node in the cluster:

   1. Run the following command to stop CTE service on each node:

       /etc/vormetric/secfs stop
      

   2. Run the following command to uninstall the CTE Agent on each node:

       /opt/teradata/vormetric/agent/vmd/bin/uninstall
      

To restore a full backup of the database to your cluster, contact your Teradata Customer Support Representative (CSR) to perform System Initializer and do a full restore.