Support Questions
Find answers, ask questions, and share your expertise

How to export/import KMS key?

How to export/import KMS key?

New Contributor

Hi there,

 

I need to export/backup a KMS key created by command "hadoop key create" from one cluster and import/restore to another cluster. I've been trying to find a solution but can't. Any help would be appreciated.

 

Thank you.

 

Kind regards,

Radek

1 REPLY 1
Highlighted

Re: How to export/import KMS key?

Rising Star

What is it you are trying to do?

If you just want to copy data over a good idea would be to run distcp from the encrypted area to the unencrypted area.

Having the same key on 2 boxes is not recommended since your data will be compromised if either of the keys are compromised.

 

If you are using the Java KeyStore then you can copy over the keystore. That will have the keys present within it.

 

If you are using cloudera's properitary KMS then you will need to backup your Keytrustee Server.