Create a cluster with encrypted EBS volumes
EBS encryption can be configured on the Hardware and Storage page of the advanced create cluster wizard in the CDP web interface.
The Encryption configuration option is available per host group. The default setting is Encryption: Not encrypted. To enable encryption, perform the following steps in the create cluster wizard for all host groups for which you would like to use encryption.
- Under Instance Type you can see Encryption Supported next to all instance types for which encryption is supported. Ensure that encryption is supported for the instance type that you would like to use.
- Click on the icon next to the chosen host group.
Under Encryption key, select the encryption key that you would like to
- To use the default encryption key, select "Default" from the dropdown.
- To use a custom key, select it from the dropdown.