Cloudera Docs

Working with an HSM

How to integrate Cloudera Data Encryption components to provide enterprise data encryption solutions.

Ranger KMS and Key Trustee Server (KTS)

Consists of Ranger KMS providing enterprise-grade key management and the Key Trustee Server key store that stores and manages cryptographic keys and other security artifacts.

  1. Install Ranger KMS backed by KTS using CM > Administration > Security > HDFS Encryption Wizard.

Ranger KMS, KTS, and Key HSM

Consists of Ranger KMS, KTS and Key HSM which provides seamless integration of all Cloudera encryption components with a HSM added.

  1. Install Ranger KMS backed by KTS using CM > Administration > Security > HDFS Encryption Wizard.
  2. Obtain and Integrate one of the following hardware security modules (HSM) supplied by a vendor.
    • Luna 7
    • CipherTrust
    • GCP Cloud HSM
    • Azure Key Vault