Document toolboxDocument toolbox

Post deployment steps for EMR 6.10 1

Applies to: Kyvos Enterprise  Kyvos Cloud (SaaS on AWS) Kyvos AWS Marketplace

Kyvos Azure Marketplace   Kyvos GCP Marketplace Kyvos Single Node Installation (Kyvos SNI)


This section explains post-deployment steps for EMR 6.10 having non-glue with TLS-enabled EMR.

After deploying the cluster on the BI Server, perform the following steps. 

  1. Go to the BI Server node.

  2. Navigate to /home/kyvos

  3. Copy the my-certs.zip file on the above path and then unzip the zip file.  

  4. After extracting the my-certs.zip file, delete the zip file. 

  5. Navigate to my-certs folder, and you will find 3 pem files. 

  6. Execute the following command: 
    openssl pkcs12 -export -in trustedCertificates.pem -inkey privateKey.pem -out trustedCertificates.p12 -name "certificate"

  7. Give the password as changeit after executing the above command. 

  8. To navigate to keytool command, go to the keytool path by executing the following command: 
    keytool -importkeystore -srckeystore trustedCertificates.p12 -srcstoretype pkcs12 -destkeystore trustedCertificates.jks
    For example, /data/kyvos/app/kyvos/jre/jre/bin/keytool -importkeystore -srckeystore trustedCertificates.p12 -srcstoretype pkcs12 -destkeystore trustedCertificates.jks

  9. Give the password as changeit after executing the above command. 

  10. Go to Kyvos Manager >EMR page, and add the following path value in the HCatalog Parameters
    jdbc:hive2://HOST_NAME:10000/default;ssl=true;sslTrustStore=TRUSTSTORE_PATH;trustStorePassword=TRUSTSTORE_PASSWORD
    For example,  jdbc:hive2://ip-10-80-64-213.ec2.internal:10000/default;ssl=true;sslTrustStore=/home/kyvos/my-certs/trustedCertificates.jks;trustStorePassword=changeit

  11. Click Save and check Sync EMR and Hadoop Configurations options.

Copyright Kyvos, Inc. All rights reserved.