New Features and Changes in Cloudera Navigator HSM KMS

The following sections describe what's new and changed in each Cloudera Navigator HSM KMS release.

What's New in Cloudera Navigator HSM KMS

The following section describes what's new in this Cloudera Navigator HSM KMS release.

This release of Cloudera Navigator HSM KMS does not include new features or functionality.

This release of Cloudera Navigator HSM KMS provides the following new functionality:

When an enterprise requires the highest level of encryption zone key (EZ key) security, or, it must adhere to strict security certification compliance standards, users now have the option of migrating from a Key Trustee KMS (KT KMS) to a Hardware Security Module KMS (HSM KMS). Migrating from KT KMS to HSM KMS essentially means that EZ key metadata is moved from one KMS to another. For details, see Migrating from a Key Trustee KMS to an HSM KMS.

This release of Cloudera Navigator HSM KMS provides the following new functionality:

This is the first release of the new Cloudera Navigator HSM KMS. The new component provides:

HSM KMS backed by Thales HSM is a custom Key Management Server (KMS) that uses a supported Thales HSM as the underlying keystore, instead of the file-based Java KeyStore (JKS) used by the default Hadoop KMS.
Navigator HSM KMS backed by Luna HSM is a custom Key Management Server (KMS) that uses a supported Luna HSM as the underlying keystore, instead of the file-based Java KeyStore (JKS) used by the default Hadoop KMS.