Configure TDE for HDFS replication
You set up TDE for HDFS replication using the instructions in the HDP Security guide. You can set TDE per directory or per cluster on HDFS. During the replication process, the source data is decrypted using the source key and is encrypted using the destination key.
- (Optional) Encrypt the source directory and grant the DLM Engine user access to the KMS key in the source Ranger service.
- Encrypt the destination directory and grant the DLM Engine user access to the KMS key in the destination Ranger service.