Enabling SSL for HDP Components - Hortonworks Data Platform

Hadoop Security Guide

Also available as:

PDF

Contents

loading table of contents...

Enabling SSL for HDP Components

The following table contains links to instructions for enabling SSL on specific HDP components.

	Note
	These instructions assume that you have already created keys and signed certificates for each component of interest, across your cluster. (See the section called “Enabling SSL: Understanding the Hadoop SSL Keystore Factory” for more information.)

Table 3.2. Configure SSL Data Protection for HDP Components

HDP Component	Notes/Link
Hadoop, MapReduce, YARN	the section called “Enabling RPC Encryption”; the section called “Enable SSL for WebHDFS, MapReduce Shuffle, and YARN”
Oozie	the section called “Enable SSL on Oozie”
HBase	the section called “Enable SSL on the HBase REST Server”
Hive (HiveServer2)	the section called “Enable SSL on HiveServer2”
Kafka	the section called “Enable SSL for Kafka Clients”
Ambari Server	Ambari Security Guide, Advanced Security Options, Optional: Set Up SSL for Ambari
Falcon	Enabled by default (see Installing the Falcon Package)
Sqoop	Clients of Hive and HBase, see Data Integration Services with HDP, Apache Sqoop Connectors
Knox Gateway	Knox Administrator Guide, Gateway Security, Configure Wire Encryption
Flume	Apache Flume User Guide, Flume Sources
Accumulo	Apache Foundation Blog, Apache Accumulo: Generating Keystores for configuring Accumulo with SSL
Phoenix	Non-Ambari Cluster Installation, Installing Apache Phoenix: Configuring Phoenix for Security and Apache Phoenix, Flume Plug-in
HUE	Non-Ambari Cluster Installation, Installing Hue, Configure Hue