Cloud HSM and Hosted Private HSM encryption

Cloudera supports encryption using Cloud HSM encryption keys. The overall requirements and steps are the same as usual, but when you create the encryption key, you need to select the HSM protection level. The instructions provided here consider the scenario of a Cloud HSM encryption key.

Cloudera also supports encryption using encryption keys from Hosted Private HSM. If you want to use Hosted Private HSM, GCP support helps you configure the setup and then provides you with the encryption key ARN. Cloudera can then use the key ARN.

For more information, see Cloud HSM and Hosted Private HSM.