Configuring Apache HDFS Encryption
Also available as:
PDF
loading table of contents...

Configuring HDP Services for HDFS Encryption

Information on configuring HDP services for HDFS Encryption.

HDFS data at rest encryption is supported on the following HDP components:

Note
Note

You should create a separate Admin user account for HDFS Data at Rest Encryption for each of the following supported components.

  • HBase
  • Hive
  • Hive on Tez
  • MapReduce
  • Oozie
  • Spark
  • Sqoop
  • Storm
  • WebHDFS
  • YARN
HDFS data at rest encryption is not supported on the following components:
  • Accumulo
  • Falcon
  • HDP Search

The remainder of this section describes scenarios and access considerations for accessing HDFS-encrypted files from supporting HDP components.

Note
Note

When HDFS encryption is configured, Spark is able to access data without any further configuration steps or code changes. HDFS encryption is transparent for Spark users.