My Oracle Support Banner

How to Setup Highly Available Active and Passive Key Trustee Servers on BDA V4.4 Using 5.5 Parcels (Doc ID 2112644.1)

Last updated on JULY 25, 2022

Applies to:

Big Data Appliance Integrated Software - Version 4.4.0 and later
Linux x86-64


The document details how to set up a high available Key Trustee Servers (Active/Passive) on BDA V4.4 with  Key Trustee Server 5.5.2 parcels. Note: Key Trustee Servers must be set up in HA mode.

Note: The recommended method for setting up Key Trustee Servers is using parcels. 

The benefit of installing with parcels is being able to use the encryption at rest wizard for setup, see the Cloudera documentation: Enabling HDFS Encryption Using the Wizard.

If Key Trustee Servers are set up with packages there are manual procedures to convert to parcels. The conversion from 5.5 packages to 5.5 parcels is covered in the Cloudera documentation section: "Migrating Unmanaged Key Trustee Server to Cloudera Manager".

This note if for initial install of Key Trustee Servers.  It is not for upgrading existing ones.


 System administrators and ACS.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
 Reference Documentation
 Known Issues
 General Prerequisites
 Prerequisites for TLS
 Prerequisites for Ports
 Prerequisites to be done on both the Active and Passive Key Trustee Servers
 Considerations for Key Trustee Server locations, on/off the BDA
 Critical Key Trustee Server Backup Recommendations
 Detailed Steps
 Install the KEYTRUSTEE_SERVER parcel on the BDA cluster
 Add a new cluster on Cloudera Manager through CM wizard
 Add  the Key Trustee Server to the new cluster through the CM wizard
 Create an organization on the Active Key Trustee Server.
 How to handle errors when adding a new cluster in Cloudera Manager through the CM wizard
 Post Installation Steps

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.