Post deployment steps for EMR 6.10

This section explains post-deployment steps for EMR 6.10 having non-glue with TLS-enabled EMR. 

After deploying the cluster on the , perform the following steps. 

1. Go to the node.

2. Navigate to /home/kyvos

3. Copy the my-certs.zip file on the above path and then unzip the zip file.  

4. After extracting the my-certs.zip file, delete the zip file. 

5. Navigate to my-certs folder, and you will find three pem files. 

6. Execute the following command: 
   openssl pkcs12 -export -in trustedCertificates.pem -inkey privateKey.pem -out trustedCertificates.p12 -name "certificate"

7. Give the password as changeit after executing the above command. 

8. Execute the following command: 
   keytool -importkeystore -srckeystore trustedCertificates.p12 -srcstoretype pkcs12 -destkeystore trustedCertificates.jks

9. Give the password as changeit after executing the above command. 

10. Go to Kyvos Manager >EMR page, and add the following path value in the HCatalog Parameters
    jdbc:hive2://HOST_NAME:10000/default;ssl=true;sslTrustStore=TRUSTSTORE_PATH;trustStorePassword=TRUSTSTORE_PASSWORD
    For example,  jdbc:hive2://ip-10-80-64-213.ec2.internal:10000/default;ssl=true;sslTrustStore=/home/kyvos/my-certs/trustedCertificates.jks;trustStorePassword=changeit

11. Click Save and check Sync EMR and Hadoop Configurations options.