6.1.2. Change the Current Master Key

To change the master key:

  • If you know the current master key or if the current master key has been persisted:

    1. Re-run the encryption setup command.

      ambari-server encrypt-passwords
    2. Enter the current master key when prompted if necessary (if it is not persisted or set as an environment variable).

    3. At the Do you want to reset Master Key prompt, enter yes.

    4. At the prompt, enter the new master key.

  • If you do not know the current master key:

    1. Remove encryption entirely, as described here.

    2. Re-run ambari-server encrypt-passwords as described here.

    3. Restart the Ambari Server.

      ambari-server restart

loading table of contents...