Integrating Key HSM with Key Trustee Server

After importing the certificate from Key Trustee Server, configure Key HSM to trust it. On the Key HSM server, run the following command:

$ sudo keyhsm trust /path/to/key_trustee_server/cert

To configure Key Trustee Server to integrate with Key HSM:

1. Make sure that the Key HSM service is running. Run the following command on the Key HSM host:

   $ sudo service keyhsm start

2. On the Key Trustee Server, run the following command:

   $ sudo ktadmin keyhsm --server https://keyhsm01.example.com:<port> --trust

3. Restart the Key Trustee Server service:
   • Using Cloudera Manager: Key Trustee Server service > Actions > Restart
   • Using the command line:

     $ sudo service keytrusteed restart