Encrypting Data at RestPDF version

Migrate the Ranger KMS db role instance to a new host

After migrating the Ranger Admin role instance to a new host, migrate the Ranger KMS db role instance.

Only if Ranger KMS has a backend database for key storage, should you migrate the Ranger KMS db role instance.

  1. Add a new Ranger KMS db role instance on another node.
  2. Start the new Ranger KMS db role instance.
  3. Stop the initial Ranger KMS db instance.
  4. Delete the initial Ranger KMS db instance.
  5. Restart the cluster.
  6. Login to Ranger Admin UI using keyadmin credentials.
  7. Update the cm_kms service to use the kms url that refers to the new hostname.