Under certain conditions, you as Administrator, need to perform a security-related
task to allow users to access to tables stored in encryption zones. You find out how to
prevent access problems to these tables.
Hive on Tez cannot run some queries on tables stored in encryption zones under
certain conditions. Perform the following procedure only when the cluster uses
self-signed certificates.
Copy the ssl-client.xml file to a directory that is
available on all hosts.
In Cloudera Manager, click Clusters > Hive on Tez > Configuration.
Search for the Hive Service Advanced Configuration Snippet (Safety
Valve) for hive-site.xml setting.
In the Hive Service Advanced Configuration Snippet (Safety Valve)
for hive-site.xml setting, click .
In Name enter the property tez.aux.uris
and in value enter path-to-ssl-client.xml.
Ensure that you include the file URI scheme in the path. For
example: