* The username used to connect to your Snowflake host
* Your Snowflake private key
* The passphrase used to encrypt the private key file, if you created an encrypted key
### Configure the Public/Private Key Pair
Follow these steps to configure a public/private key pair.
#### Generate a Private Key
1. Open a terminal window.
2. Generate a private key.
You can create either an unencrypted or encrypted private key.
* **For Unencrypted private key, use the following command:**
```bash theme={"dark"}
openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out rsa_key.p8 -nocrypt
```
* **For Encrypted private key, use the following command:**
```bash theme={"dark"}
openssl genrsa 2048 | openssl pkcs8 -topk8 -v2 des3 -inform PEM -out rsa_key.p8
```
The commands generate a private key in PEM format:
```
-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIE6T...
-----END ENCRYPTED PRIVATE KEY-----
```
#### Generate a Public Key
Generate the public key from the command line by referencing the private key. This example assumes the private key is encrypted and stored in the file `rsa_key.p8`.
Generate a public key from the private key:
```bash theme={"dark"}
openssl rsa -in rsa_key.p8 -pubout -out rsa_key.pub
```
The command generates the public key in PEM format:
```
-----BEGIN PUBLIC KEY-----
MIIBIj...
-----END PUBLIC KEY-----
```
#### Store the Keys Securely
* Store the private and public key files in a secure local directory.
* Record the file paths for future reference.
* The private key uses the PKCS#8 (Public Key Cryptography Standards) format and is encrypted with the specified passphrase.
#### Assign the Public Key to a Snowflake User
Use the [ALTER USER](https://docs.snowflake.com/en/sql-reference/sql/alter-user) command to assign the public key to the user by setting the RSA\_PUBLIC\_KEY property. For example:
`ALTER USER example_user SET RSA_PUBLIC_KEY='MIIBIjANBgkqh...';`
#### Verify the Public Key Fingerprint
1. Run the following command to retrieve the users public key fingerprint, and then copy the output.
```bash theme={"dark"}
DESC USER example_user
->> SELECT SUBSTR(
(SELECT "value" FROM $1
WHERE "property" = 'RSA_PUBLIC_KEY_FP'),
LEN('SHA256:') + 1) AS key;
```
2. Run the following command on the command line and copy the output.
```bash theme={"dark"}
openssl rsa -pubin -in rsa_key.pub -outform DER | openssl dgst -sha256 -binary | openssl enc -base64
```
3. Compare both outputs.
If the values match, the configuration is correct.
#### Key Rotation
Snowflake supports multiple active keys to allow for uninterrupted rotation. Rotate and replace your public and private keys based on the expiration schedule you follow internally.
Currently, you can use the RSA\_PUBLIC\_KEY and RSA\_PUBLIC\_KEY\_2 parameters for ALTER USER to associate up to 2 public keys with a single user.
To rotate your keys,
1. Complete the steps in Using Key Pair Authentication to...
* Generate a new private and public key set.
* Assign the public key to the user. Set the public key value to either
RSA\_PUBLIC\_KEY or RSA\_PUBLIC\_KEY\_2 (whichever key value is not currently in use).
For example:
`alter user jsmith set rsa_public_key_2='JERUEHtcve...';`
2. Update the code to connect to Snowflake. Specify the new private key.
Snowflake verifies the correct active public key for authentication based on the private key submitted with your connection information.
3. Remove the old public key from the user profile. For example:
`alter user jsmith unset rsa_public_key;`
## Connecting to your Snowflake account
This section enumerates the options in the **Credentials** and **Details** panes in the Snowflake Using Key Pair Authentication Connector page. The components of the other panes in this page, **Scheduling** and **Name & Describe Your DataSet**, are universal across most connector types and are discussed in greater length in [Adding a DataSet Using a Data Connector](/docs/s/article/360042926274 "Adding a DataSet Using a Data Connector").
### Credentials Pane
This pane contains fields for entering credentials to connect to your Snowflake account. The following table describes what is needed for each field:
Field | Description |
|---|---|
Account Identifier | Enter the account name for your Snowflake account. For information about finding your account name, see Prerequisites . For US West Region, it should be account\_name and for all other regions, use account\_name.region\_id. |
Username | Enter the username associated with your Snowflake account. |
Private Key | Enter your private key. For more information about generating your private key, see Configuring the public/private key pair . |
| Passphrase | Enter the passphrase used to encrypt the private key file, if you created an encrypted key. |
| Role | Enter your user role. |
Parameter | Description |
|---|---|
Query | Enter the SQL query to use to retrieve your data. You can use the Query Helper parameter to help you write a usable SQL query. To use the Query Helper , do the following:
|
Warehouses | Select the warehouse containing the data you want to retrieve. The list populates with all of the warehouses you have access to based on your credentials. |
Databases | Select the database containing the data you want to retrieve. The list populates with all of the databases you have access to based on your credentials. |
Database Schema | Select the database schema containing the data you want to retrieve. The list populates with all of the schemas you have access to based on your credentials. |
Database Tables (Optional) | Select the database table you want to retrieve. The list populates with all of the tables you have access to based on your credentials. If you do not select a database table, the connector retrieves your entire database schema. |
Table Columns (Optional) | Select the table columns you want to retrieve. The list populates with all of the columns you have access to based on your credentials. If you do not select a table column, the connector retrieves your entire selected database table. |
Query Helper (Optional) | When you select warehouses, databases, schemas, tables, etc. from the above menus, a usable SQL query is built for you in this field. Copy and paste the SQL statement in this field into the Query field. For more information, see Query , above. |
| Fetch Size (Optional) | Enter a fetch size for memory performance. If this field is left blank, the default value of 1000 will be used. If the DataSet throws an "Out of memory" error, try decreasing the fetch size. |
| Convert Null Values to empty string | Selecting this would change all the null values from the source table in Snowflake to empty strings in Domo |
| Convert Timezone | Selecting a timezone here tells the connector about the timezone of the source data. The connector converts the Timestamp values from the selected timezone to UTC using this information. |
Other Panes
For information about the remaining sections of the connector interface, including how to configure scheduling, retry, and update options, see [Adding a DataSet Using a Data Connector](/docs/s/article/360042926274).
## FAQs