Support Questions

Find answers, ask questions, and share your expertise

HDFS encryption and 3rd party KMS

avatar
Master Mentor

Is it possible to integrate HDFS encryption with 3rd party KMS solutions? for example: Microsoft KMS

I do see that there is Ranger KMS https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Ranger_KMS_Admin_Guide/content/ch_ranger... but we are looking into the option to integrate HDFS encryption with the existing KMS.

1 ACCEPTED SOLUTION

avatar
Rising Star

HP Voltage has done the integration of HDFS encryption with their own KMS. They offer it as part of HPE Secure Storage solution. HDFS encryption can be integrated with 3 party KMS using the keyprovider APIs, however there is some work involved in ensure the integration works, specifically in Kerberos mode. HP Voltage is the only vendor partner to have completed this work.

View solution in original post

2 REPLIES 2

avatar

@Neeraj Sabharwal

3rd Parth KMS solutions are not supported yet. This is on the roadmap, though.

avatar
Rising Star

HP Voltage has done the integration of HDFS encryption with their own KMS. They offer it as part of HPE Secure Storage solution. HDFS encryption can be integrated with 3 party KMS using the keyprovider APIs, however there is some work involved in ensure the integration works, specifically in Kerberos mode. HP Voltage is the only vendor partner to have completed this work.