Prerequisites for using FIPS
This page provides comprehensive information regarding prerequisites that you must be aware of while using FIPS for CDP.
About CDP with FIPS
Creating a new, fresh cluster is the only way to enable or disable FIPS.
Unsupported Features
-
Upgrades are not currently supported to or from CDP with FIPS.
-
Replication is not currently supported.
- MRIT localfs is not supported in FIPS environments where SHA2 compatibility is required.
System Requirements
-
- Operating system:
-
RHEL or RHEL 8.8. For more information, see Operating system requirements.
-
- Java:
-
Support for FIPS + OpenJDK 8 or Oracle JDK 8.
- OpenJDK 8 versions: For FIPS the only required and tested versions are 1.8u231 and 1.8u232.
- Install and configure a database. See Install and Configure Databases
Supported CDP Versions
-
Cloudera Manager versions 7.2.4, 7.3.1, 7.4.4, 7.6.1, 7.7.1, 7.7.3, 7.11.3, and 7.13.1.
-
CDP Private Cloud Base versions 7.1.5, 7.1.6, 7.1.7, 7.1.7 SP1, 7.1.7 SP2, 7.1.8, 7.1.9, 7.1.9 SP1, and 7.3.1.
Supported CDP Components
The following components are supported in FIPS mode:
- Atlas
- Avro
- Cloudera Manager
- Cruise Control
- Hadoop
- Hadoop Credential Provider
- HDFS
- HBase
- Hive
- Hive-on-Tez
- Hive Meta Store
- Hive Warehouse Connector
- Hue
- Iceberg
- Impala
- Kafka
- Kerberos
- Knox
- Kudu
- Livy
- MapReduce
- OMID
- Oozie
- Parquet
- Phoenix
- Queue Manager
- Ranger
- Ranger KMS
- Schema Registry
- Streams Messaging Manager
- Streams Replication Manager
- Solr
- Spark
- Sqoop
- Tez
- TLS
- YARN
- ZooKeeper
Step 1: Prepare hosts
Step 2: Install Cloudera Manager server
Step 3: Validate the CCJ and CCS installation
Run the following commands on each host to validate the CCJ and CCS installation.