Cloudera Docs

Integrating Ranger KMS DB with Google Cloud HSM

How to integrate Ranger KMS DB with Google Cloud HSM

This task describes how to integrate Ranger KMS DB with Google Cloud Platform (GCP) Hardware Security Module (HSM). This process includes setting up the GCP HSM service on a client (host), configuring Ranger KMS with GCP, or migrating the Master Key storage from the KMS database to the Google Cloud HSM.

  • Ensure you can log in to the Google cloud console using your accout. (Requires Google account access).
  • Ensure you have Java (jdk1.8.0.232) installed.
Set Up Google Cloud HSM
  1. Log in to Google Cloud console using Cloudera account.
  2. Create the service account by selecting or creating the Project.
  3. Create the key.
  4. Download and save the key in JSON format.
  5. In GCP Console > Key Management create the key ring.
    Figure 1. Creating a key ring in Google Cloud Platform
    Creating a key ring in Google Cloud Platform
    This example shows a project gcp-eng-sdx-daily, region Global, and key ring RangerKMSRing.
The key ring is created.
Figure 2. RangerKMSRing created