3.1. How To Regenerate Keytabs
Browse to Admin > Kerberos.
Click the Regenerate Kerberos button.
Confirm your selection to proceed.
Optionally, you can regenerate keytabs for only those hosts that are missing keytabs. For example, hosts that were not online/available from Ambari when enabling Kerberos.
Once you confirm, Ambari will connect to the KDC and regenerate the keytabs for the Service and Ambari principals in the cluster.
Once complete, you must restart all services for the new keytabs to be used.
![[Note]](../common/images/admon/note.png) | Note |
|---|---|
Ambari requires the Kerberos Admin credentials in order to regenerate the keytabs. If the credentials are not available to Ambari, you will be prompted to enter the KDC Admin username and password. For more information on configuring Kerberos in your cluster, see Hortonworks Data Platform Apache Ambari Security. |