Configure Knox SSO for Data Analytics Studio

Update the Knox SSO settings in the DAS Configuration in Ambari.

1. Export the Knox certificate:
   1. From the Knox Gateway machine, run the following command:

      $JAVA_HOME/bin/keytool -export -alias gateway-identity -rfc -file <cert.pem> -keystore /usr/hdp/current/knox-server/data/security/keystores/gateway.jks

   2. When prompted, enter the Knox master password.
   3. Note the location where you save the cert.pem file.
2. Enable the Knox SSO topology settings:
   1. From Ambari > Data Analytics Studio > Configs > Advanced data_analytics_studio-security-site, check to select knox_sso_enabled.
   2. Set knox_sso_url value as https://<knox-host>:8443/gateway/knoxsso/api/v1/websso.
   3. Copy the contents of the PEM file exported in Step 1 to knox_publickey. Make sure the certificate headers are not copied.
   4. Click Save and click through the confirmation pop-ups.
   5. Restart Data Analytics Studio webapp.
   6. Select Actions > Restart All Required to restart all other services that require a restart.