Security
Also available as:
PDF
loading table of contents...

Configuring HDP Services for HDFS Encryption

HDFS data at rest encryption is supported on the following HDP components:

[Important]Important

You should create a separate Admin user account for HDFS Data at Rest Encryption for each of the following supported components.

  • HBase

  • Hive

  • Hive on Tez

  • MapReduce

  • Oozie

  • Spark

  • Sqoop

  • Storm

  • WebHDFS

  • YARN

HDFS data at rest encryption is not supported on the following components:

  • Accumulo

  • Falcon

  • HDP Search

The remainder of this section describes scenarios and access considerations for accessing HDFS-encrypted files from supporting HDP components.

[Note]Note

When HDFS encryption is configured, Spark is able to access data without any further configuration steps or code changes. HDFS encryption is transparent for Spark users.