Rollback of Ranger KMS DB to KTS

This procedure decsribes how to rollback from Ranger KMS DB to KTS in case of failure during or after key migration.

Note : Any keys created after migration from KTS to Ranger KMS will not be present after rollback.

Stop Ranger KMS and HDFS from the Cloudera Manager UI.
Stop Key Trustee Server
note
KTS was stopped after the keys were migrated, but not deleted.
Delete Ranger KMS service from the Cloudera Manager UI.
Add Ranger KMS KTS service from the Cloudera Manager UI.
note
While adding Ranger KMS KTS, restore the GPG keys backup created during the migration at location /var/lib/kms-keytrustee/keytrustee/.keytrustee/. If the backup files were not deleted while removing Ranger KMS KTS during migration, it will be already present at required location
Start Ranger KMS KTS and HDFS from the Cloudera Manager UI.