question Re: Is the AES NI CPU necessary for encryption HDFS data? in Support Questions

Is the AES NI CPU necessary for encryption HDFS data?

kabadou_rawia — Tue, 31 Oct 2017 18:02:13 GMT

Hello,

I'm trying to configure and use HDFS data at rest encryption. I'm stuck at the step of preparing the environment as mentioned in the following link:

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.2/bk_security/content/AES-NI-CPU-support.html.

When i do $ cat /proc/cpuinfo | grep aes i got nothing in return. So, AES NI is not enabled on my CPU.

My questions are:

1- Is it possible to skip all these steps mentioned in the section "Prepare the environment" and proceed the next step which is "Create an Encryption Key"?

If no:

2- How can enable AES NI CPU for the first sub-step?

3- How can i install version libcrypto.so mentioned in the second sub-step on my Ubuntu 14.04?

I'll be grateful if someone could help me.

Re: Is the AES NI CPU necessary for encryption HDFS data?

vperiasamy — Tue, 31 Oct 2017 18:43:15 GMT

AES NI is a performance accelerator, so it is not required to use HDFS TDE (transparent data encryption).

Re: Is the AES NI CPU necessary for encryption HDFS data?

kabadou_rawia — Tue, 31 Oct 2017 20:40:12 GMT

@vperiasamy

Thank you for your reply. I've skipped the first sub-step related to AES NI CPU and i proceeded with the second sub-step for libcrypto. When i tap $ hadoop checknative i got the same output mentioned in the tutorial. So, everything is working correctly.

Re: Is the AES NI CPU necessary for encryption HDFS data?

vperiasamy — Tue, 31 Oct 2017 20:53:50 GMT

I am glad it is working for you now. Please accept the answer if your issue is resolved.