3. Optional: Encrypt Database and LDAP Passwords

By default the passwords to access the Ambari database and the LDAP server are stored in a plain text configuration file. To have those passwords encrypted, you need to run a special setup command.

	Important
	Ambari Server should not be running when you do this: either make the edits before you start Ambari Server the first time or bring the server down to make the edits.

On the Ambari Server, run the special setup command and answer the prompts:
```
ambari-server setup-security
```
1. Select 4 for Encrypt passwords stored in ambari.properties file.
2. Provide a master key for encrypting the passwords. You are prompted to enter the key twice for accuracy.
  Important
  If your passwords are encrypted, you need access to the master key to start Ambari Server.
3. You have three options for maintaining the master key:
  - At the Persist prompt, select y. This stores the key in a file on the server.
  - Create an environment variable AMBARI_SECURITY_MASTER_KEY and set it to the key.
  - Provide the key manually at the prompt on server startup.
4. Start or restart the Server
```
ambari-server restart
```

Legal notices

	Important
	If your passwords are encrypted, you need access to the master key to start Ambari Server.