Cloudera clusters can use a combination of data at rest encryption mechanisms, including HDFS transparent encryption and Cloudera Navigator Encrypt. Both of these data at rest encryption mechanisms can be augmented with key management using Cloudera Navigator Key Trustee Server and Cloudera Navigator Key HSM.

Before configuring encryption for data at rest, see Cloudera Navigator Data Encryption Overview for an overview of Cloudera Navigator concepts, architecture, and components.

• Data at Rest Encryption Reference Architecture
• Data at Rest Encryption Requirements
• Resource Planning for Data at Rest Encryption
• HDFS Transparent Encryption