5. Enabling SSL for HDP Components

The following table contains links to instructions for enabling SSL on specific HDP components.

	Note
	These instructions assume that you have already created keys and signed certificates for each component of interest, across your cluster. (See Section 3, “Enabling SSL: Understanding the Hadoop SSL Keystore Factory” for more information.)

Table 3.2. Configure SSL Data Protection for HDP Components

HDP Component	Notes/Link
Hadoop, MapReduce, YARN	Section 1, “Enabling RPC Encryption”; Section 5.1, “Enable SSL for WebHDFS, MapReduce Shuffle, and YARN”
Oozie	Section 5.2, “Enable SSL on Oozie”
HBase	Section 5.3, “Enable SSL on WebHBase and the HBase REST API”
Hive (HiveServer2)	Section 5.4, “Enable SSL on HiveServer2”
Kafka	Section 5.5, “Enable SSL for Kafka Clients”
Ambari Server	Ambari Security Guide, Advanced Security Options, Optional: Set Up SSL for Ambari
Falcon	Enabled by default (see Installing the Falcon Package)
Sqoop	Clients of Hive and HBase, see Data Integration Services with HDP, Apache Sqoop Connectors
Knox Gateway	Knox Administrator Guide, Gateway Security, Configure Wire Encryption
Flume	Apache Flume User Guide, Flume Sources
Accumulo	Apache Foundation Blog, Apache Accumulo: Generating Keystores for configuring Accumulo with SSL
Phoenix	Non-Ambari Cluster Installation, Installing Apache Phoenix: Configuring Phoenix for Security and Apache Phoenix, Flume Plug-in
HUE	Non-Ambari Cluster Installation, Installing Hue, Configure Hue