Cloudera Docs

Configuring Navigator Encrypt using Cloudera Manager

Learn about configuring Navigator Encrypt using Cloudera Manager, including the mandatory configurations of mount points, encryption rules, and ACL rules.

Adding Navigator Encrypt mount points

Learn about configuring Navigator Encrypt mount points using Cloudera Manager.

  1. Go to Cloudera Manager > Navigator Encrypt > Configuration.
  2. Search for the NavEncrypt Mount Points property.
  3. Add the block device and mount point, separated by a space.
  4. Click Save Changes.
  5. Select Actions > Create the NavEncrypt Mount Points.
    The Create the NavEncrypt Mount Points wizard appears.
  6. Confirm the action by clicking Create the NavEncrypt Mount Points.
    The process starts.
  7. Click Close after the process is complete.

Adding encryption rules

Learn about configuring encryption rules for Navigator Encrypt using Cloudera Manager.

  1. Go to Cloudera Manager > Navigator Encrypt > Configuration.
  2. Search for the Encryption Rules property.
  3. Add the category, directory, or file, and the encrypted mount point, separated by spaces.
  4. Click Save Changes.
  5. Select Actions > Add NavEncrypt encrypt rules and encrypt files.
  6. Confirm the action by clicking Add NavEncrypt encrypt rules and encrypt files.
    The process starts.
  7. Click Close after the process is complete.

Adding ACL rules

Learn about configuring ACL rules for Navigator Encrypt using Cloudera Manager.

  1. Go to Cloudera Manager > Navigator Encrypt > Configuration.
  2. Search for the ACL Rules property.
  3. Add the type of rule (either ALLOW or DENY), @<category>, the access path, and the absolute path of a process or command.
    navencrypt acl --add --rule="ALLOW @kudu * /var/lib/kudu/tserver"
  4. Click Save Changes.
  5. Select Actions > Add NavEncrypt ACL Rules.
  6. Confirm the action by clicking Add NavEncrypt ACL Rules.
    The process starts.
  7. Click Close after the process is complete.