Support Questions

Find answers, ask questions, and share your expertise

Who agreed with this solution

avatar
Master Guru

@RajeshBodolla The general steps which I used to follow for Reinstall KTS from scratch this below, might be you are missing something. 

 

1. Stop the KMS service
2. Delete the KMS service from the Cloudera Manager UI
3. Then remove all the contents under "rm -rf /var/lib/kms-keytrustee/"

Note - Make sure that the hidden directory is also removed '/var/lib/kms-keytrustee/keytrustee/.keytrustee'

4. Now sync the Active and passive KTS using the following steps:
a. Stop the Key Trustee Server service (Key Trustee Server service > Actions > Stop).
b. Run the following command on the Active Key Trustee Server:
$ sudo rsync -zav --exclude .ssl /var/lib/keytrustee/.keytrustee root@keytrustee02.example.com:/var/lib/keytrustee/.

Note - Replace keytrustee02.example.com with the hostname of the Passive Key Trustee Server.

c. Run the following command on the Passive Key Trustee Server:

$ sudo ktadmin init

d. Start the Key Trustee Server service (Key Trustee Server service > Actions > Start).
e. Enable synchronous replication (Key Trustee Server service > Actions > Setup Enable Synchronous Replication in HA mode).
f. Restart the Key Trustee Server service (Key Trustee Server service > Actions > Restart).

Once this is done, now recreate the KMS service using the steps in the following link

https://www.cloudera.com/documentation/enterprise/latest/topics/key_trustee_kms_ha.html

Cheers!
Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.

View solution in original post

Who agreed with this solution