Hadoop KMS is a key management system that enables encrypted transport to and from the Hadoop cluster. This section describes how to configure the for integration with KMS.
NOTE: The supports encryption at rest only through the KMS solution provided with the Hadoop distribution. Generic encryption at rest is not supported.
NOTE: If KMS is enabled on the cluster, you must configure KMS for the regardless of other security features enabled on the cluster.
NOTE: The required configuration for integrating with each Hadoop distribution may vary. Please be sure to review the details.
KMS is a cluster-wide configuration. If you are enabling Kerberos, secure impersonation, or encryption at rest on the cluster, you must perform the KMS site configuration changes in the pages for your specific Hadoop distribution.
Cloudera/Sentry: See Configure for KMS for Sentry.
Hortonworks/Ranger: See Configure for KMS for Ranger.