Post deployment steps for EMR 6.10 1

Applies to: Kyvos Enterprise  Kyvos Cloud (SaaS on AWS) Kyvos AWS Marketplace

Kyvos Azure Marketplace   Kyvos GCP Marketplace Kyvos Single Node Installation (Kyvos SNI)

This section explains post-deployment steps for EMR 6.10 having non-glue with TLS-enabled EMR.

After deploying the cluster on the BI Server, perform the following steps. 

1. Go to the BI Server node.

2. Navigate to /home/kyvos

3. Copy the my-certs.zip file on the above path and then unzip the zip file.  

4. After extracting the my-certs.zip file, delete the zip file. 

5. Navigate to my-certs folder, and you will find 3 pem files. 

6. Execute the following command: 
   openssl pkcs12 -export -in trustedCertificates.pem -inkey privateKey.pem -out trustedCertificates.p12 -name "certificate"

7. Give the password as changeit after executing the above command. 

8. To navigate to keytool command, go to the keytool path by executing the following command: 
   keytool -importkeystore -srckeystore trustedCertificates.p12 -srcstoretype pkcs12 -destkeystore trustedCertificates.jks
   For example, /data/kyvos/app/kyvos/jre/jre/bin/keytool -importkeystore -srckeystore trustedCertificates.p12 -srcstoretype pkcs12 -destkeystore trustedCertificates.jks

9. Give the password as changeit after executing the above command. 

10. Go to Kyvos Manager >EMR page, and add the following path value in the HCatalog Parameters
    jdbc:hive2://HOST_NAME:10000/default;ssl=true;sslTrustStore=TRUSTSTORE_PATH;trustStorePassword=TRUSTSTORE_PASSWORD
    For example,  jdbc:hive2://ip-10-80-64-213.ec2.internal:10000/default;ssl=true;sslTrustStore=/home/kyvos/my-certs/trustedCertificates.jks;trustStorePassword=changeit

11. Click Save and check Sync EMR and Hadoop Configurations options.