CDH 6 to CDP Private Cloud BasePDF version

Configure encryption zone security

Under certain conditions, you as Administrator, need to perform a security-related task to allow users to access to tables stored in encryption zones. You find out how to prevent access problems to these tables.

Hive on Tez cannot run some queries on tables stored in encryption zones under certain conditions. Perform the following procedure only when the cluster uses self-signed certificates.
  1. Copy the ssl-client.xml file to a directory that is available on all hosts.
  2. In Cloudera Manager, click Clusters > Hive on Tez > Configuration.
  3. Search for the Hive Service Advanced Configuration Snippet (Safety Valve) for hive-site.xml setting.
  4. In the Hive Service Advanced Configuration Snippet (Safety Valve) for hive-site.xml setting, click .
  5. In Name enter the property tez.aux.uris and in value enter path-to-ssl-client.xml.
    Ensure that you include the file URI scheme in the path. For example:
    tez.aux.uris=file:///etc/hadoof/conf