Set up local encryption keys for production environments
After installing HCD, create a local encryption key file, distribute it to the same location on all nodes in the cluster, and update the cassandra.yaml system_key_directory property.
The location of the cassandra.yaml file depends on your installation type.
-
Package installations
-
Tarball installations
/etc/hcd/cassandra/cassandra.yamlINSTALLATION_LOCATION/resources/cassandra/conf/cassandra.yamlReplace INSTALLATION_LOCATION with the path where you extracted the HCD tarball.
Prerequisites
To ensure support for all encryption algorithms, enable JCE.
|
Starting in |
Procedure
-
If the directory does not exist, create the
/confdirectory based on your HCD installation type:-
Package installations
-
Tarball installations
/etc/hcd/confINSTALLATION_LOCATION/resources/hcd/confReplace
INSTALLATION_LOCATIONwith the installation location. -
-
Generate the encryption key file:
include::ROOT:partial$write access on them. If necessary, change the ownership of the file to the HCD user.
chown cassandra /etc/hcd/conf/system_key
