Cloudera Docs

Configuring TLS/SSL for HBase Thrift Server

You can configure TLS/SSL for HBase Thrift Server using Cloudera Manager.

  1. In Cloudera Manager, select the HBase service.
  2. Click the Configuration tab.
  3. Search for tls/ssl thrift.
  4. Check Enable TLS/SSL for HBase Thrift Server over HTTP.
  5. Edit the HBase REST Server TLS/SSL properties according to your configuration.
    Table 1. HBase TLS/SSL Properties
    Property Description
    HBase Thrift Server over HTTP TLS/SSL Server JKS Keystore File Location

    Path to the TLS/SSL keystore file (in JKS format) with the TLS/SSL server certificate and private key. Used when HBase Thrift Server over HTTP acts as a TLS/SSL server.
    HBase Thrift Server over HTTP TLS/SSL Server JKS Keystore File Password

    Password for the HBase Thrift Server JKS keystore file.
    HBase Thrift Server over HTTP TLS/SSL Server JKS Keystore Key Password

    Password that protects the private key contained in the JKS keystore used when HBase Thrift Server over HTTP acts as a TLS/SSL server.
  6. Click Save Changes.
  7. Restart the HBase service.