I am new to HDFS Transparent encryption feature. I am using cloudera CDH 5.4.9 and trying to use hdfs encryption in following manner. # I am using Java KeyStore and configured KMS service and integrated HDFS to use this JAVA KMS # Create two users useradd -m user1 passwd user1 useradd -m user2 passwd user2 # As a user1 perform following operations # Create key and create user1 encryption zone # link user1 zone to created key su user1 hadoop key create user1key1 hadoop fs -mkdir /tmp/user1zone1 su hdfs hdfs crypto -createZone -keyName user1key1 -path /tmp/user1zone1 # verify zone is created hdfs crypto -listZones # create file with user1 credential and put into user1 encryption zone echo "Hello World" > /tmp/helloWorld.txt hadoop fs -put /tmp/helloWorld.txt /tmp/user1zone1 hadoop fs -cat /tmp/user1zone1/helloWorld.txt Hello World # Verify if file is encrypted su hdfs hadoop fs -cat /.reserved/raw/tmp/zone1/helloWorld.txt T▒▒6▒5▒▒7̼[ # Now login as another user su user2 hadoop fs -cat /tmp/user1zone1/helloWorld.txt Hello World If encryption zone was created by user1 then how another user2 is able to view the encrypted data. I might be missing something very basic here. Can anyone shed some light on this? ... View more