https://community.cloudera.com/t5/Support-Questions/Can-Voltage-or-Safenet-be-used-as-an-Alternative-Key/m-p/95790#M59149 <P>Can I use Voltage or Safenet / Key Secure as the Key Management Solution for the Encrypted Zone Keys needed for Transparent Data Encryption.</P> Thu, 22 Oct 2015 05:04:45 GMT amcbarnett 2015-10-22T05:04:45Z https://community.cloudera.com/t5/Support-Questions/Can-Voltage-or-Safenet-be-used-as-an-Alternative-Key/m-p/95790#M59149 <P>Can I use Voltage or Safenet / Key Secure as the Key Management Solution for the Encrypted Zone Keys needed for Transparent Data Encryption.</P> Thu, 22 Oct 2015 05:04:45 GMT https://community.cloudera.com/t5/Support-Questions/Can-Voltage-or-Safenet-be-used-as-an-Alternative-Key/m-p/95790#M59149 amcbarnett 2015-10-22T05:04:45Z https://community.cloudera.com/t5/Support-Questions/Can-Voltage-or-Safenet-be-used-as-an-Alternative-Key/m-p/95791#M59150 <P>KeySecure key management platform has different mechanisms for integration </P><UL><LI>their own Network Attached Encryption (NAE) API and </LI><LI>the OASIS-standards based Key Management Interoperability Protocol (KMIP) API, </LI></UL><P>each of which can either be used directly and/or optionally fronted with either SOAP or REST web services interfaces.</P><P>Voltage offers an alternate KMS to Ranger KMS, and Voltage KMS also works with HDFS encryption. Voltage KMS works on a stateless key management but they can also work with a Hardware Software Modules (HSM) like Safenet.</P><P>SAfenet is a hardware security module. Ranger KMS would have to be configured with a proxy to store the Encryption Zone Keys (EZK) in Safenet instead of a database. Voltage KMS is the only solution so far for this. </P><P>So long and short, Voltage is an alternative KMS to Ranger KMS. </P><P>Saftenet cannot be used as a direct alternative to Ranger KMS because it is a HSM and it would need a proxy software or a KMS in between.</P> Thu, 22 Oct 2015 05:14:36 GMT https://community.cloudera.com/t5/Support-Questions/Can-Voltage-or-Safenet-be-used-as-an-Alternative-Key/m-p/95791#M59150 amcbarnett 2015-10-22T05:14:36Z https://community.cloudera.com/t5/Support-Questions/Can-Voltage-or-Safenet-be-used-as-an-Alternative-Key/m-p/95792#M59151 <P><A rel="user" href="https://community.cloudera.com/users/369/amcbarnett.html" nodeid="369">@amcbarnett@hortonworks.com</A></P> Thu, 22 Oct 2015 06:58:51 GMT https://community.cloudera.com/t5/Support-Questions/Can-Voltage-or-Safenet-be-used-as-an-Alternative-Key/m-p/95792#M59151 nsabharwal 2015-10-22T06:58:51Z https://community.cloudera.com/t5/Support-Questions/Can-Voltage-or-Safenet-be-used-as-an-Alternative-Key/m-p/95793#M59152 <A rel="user" href="https://community.cloudera.com/users/369/amcbarnett.html" nodeid="369">@amcbarnett@hortonworks.com</A><P>Yes</P><P><A target="_blank" href="https://www.google.com/webhp?sourceid=chrome-instant&amp;rlz=1C5CHFA_enUS548US548&amp;ion=1&amp;espv=2&amp;ie=UTF-8#q=Voltage+hortonworks">Voltage</A> </P><P><A target="_blank" href="http://data-protection.safenet-inc.com/page/3/">Safenet-inc</A></P> Thu, 22 Oct 2015 07:00:51 GMT https://community.cloudera.com/t5/Support-Questions/Can-Voltage-or-Safenet-be-used-as-an-Alternative-Key/m-p/95793#M59152 nsabharwal 2015-10-22T07:00:51Z https://community.cloudera.com/t5/Support-Questions/Can-Voltage-or-Safenet-be-used-as-an-Alternative-Key/m-p/95794#M59153 <P>As of HDP 2.5 Safenet Luna is supported... </P><P><A href="https://cwiki.apache.org/confluence/display/RANGER/Ranger+KMS+Luna+HSM+Support" target="_blank">https://cwiki.apache.org/confluence/display/RANGER/Ranger+KMS+Luna+HSM+Support</A></P> Mon, 05 Sep 2016 21:39:10 GMT https://community.cloudera.com/t5/Support-Questions/Can-Voltage-or-Safenet-be-used-as-an-Alternative-Key/m-p/95794#M59153 karl_funk 2016-09-05T21:39:10Z