question Re: HDFS encryption and 3rd party KMS in Archives of Support Questions (Read Only)

HDFS encryption and 3rd party KMS

nsabharwal — Mon, 09 May 2016 20:46:53 GMT

Is it possible to integrate HDFS encryption with 3rd party KMS solutions? for example: Microsoft KMS

I do see that there is Ranger KMS https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Ranger_KMS_Admin_Guide/content/ch_ranger_kms_overview.html but we are looking into the option to integrate HDFS encryption with the existing KMS.

Re: HDFS encryption and 3rd party KMS

emaxwell — Mon, 09 May 2016 21:07:31 GMT

@Neeraj Sabharwal

3rd Parth KMS solutions are not supported yet. This is on the roadmap, though.

Re: HDFS encryption and 3rd party KMS

bganesan — Tue, 10 May 2016 04:13:14 GMT

HP Voltage has done the integration of HDFS encryption with their own KMS. They offer it as part of HPE Secure Storage solution. HDFS encryption can be integrated with 3 party KMS using the keyprovider APIs, however there is some work involved in ensure the integration works, specifically in Kerberos mode. HP Voltage is the only vendor partner to have completed this work.