Working with an HSM

How to integrate Cloudera Data Encryption components to provide enterprise data encryption solutions.

Ranger KMS and Key Trustee Server (KTS)

Consists of Ranger KMS providing enterprise-grade key management and the Key Trustee Server key store that stores and manages cryptographic keys and other security artifacts.

  1. Install Ranger KMS backed by KTS using CM > Administration > Security > HDFS Encryption Wizard.

Ranger KMS, KTS, and Key HSM

Consists of Ranger KMS, KTS and Key HSM which provides seamless integration of all Cloudera encryption components with a HSM added.

  1. Install Ranger KMS backed by KTS using CM > Administration > Security > HDFS Encryption Wizard.
  2. Obtain and Integrate one of the following hardware security modules (HSM) supplied by a vendor.
    • Luna 7
    • CipherTrust
    • GCP Cloud HSM
    • Azure Key Vault