Known Issues in Ranger KMS

Known issues and technical limitations for Ranger KMS are addressed in Cloudera Runtime 7.1.9 SP2.

Known issues identified in Cloudera Runtime 7.1.9 SP2

There are no new known issues identified in this release.

CDPD-99837: Mixed case key names can break HDFS encryption after KTS to Ranger KMS migration: 7.1.9 SP1 CHF17, 7.1.9 SP2; When you migrate encryption keys from Key Trustee Server (KTS) to the Ranger KMS DB, encryption zone key names that were originally mixed case (uppercase, lowercase, or camelCase) in KTS can cause HDFS decryption to fail after migration.

note
Keys with names in all lower case continues to work.; None.
CDPD-48975: Ranger KMS KTS to KMS DB migration : keys with the same name but different case are not migrated: KMS keys are not case sensitive; No workarounds. Such keys combination are very rare and migration doc was updated to check such keys before starting the migration.