Integrating CTE with an Apache Cassandra database

This document describes how to integrate CTE with an Apache Cassandra database.

Test Environment

• CTE Agent: 7.2.0 and 7.3.0

• CipherTrust Manager: 2.8.0, 2.9.0, and 2.10.0

• OS: Ubuntu 20.04 and Ubuntu 18

• Apache Cassandra version: 3.6.8

• File System: XFS and EXT4

Steps

To integrate CTE with an Apache Cassandra database, install and register the CTE Agent and create appropriate GuardPoints.

Install and Register the CTE Agent

1. Install the CTE Agent on the client machine where the Apache Cassandra database is installed and configured.

2. Register the CTE Agent with the CipherTrust Manager.

Refer to CTE - Agent Quick Start Guide for details.

Create the GuardPoints

Perform the following steps on the CTE client.

1. On the CTE client, stop the Apache Cassandra database.

2. On the CipherTrust Manager, create a GuardPoint. While creating the GuardPoint:

   • Enter the Path, /var/lib/33buntu33ra/data.

   • Select the Policy Type. You can select Standard or Live Data Transformation (LDT).

     Note

     Set the Key Selection Rules of the LDT policy as AES 256.

   • Create a User Set with user cassandb, and give user the permission to perform all Actions and Effects. The default access is No Access.

   Refer to Creating GuardPoints for details.

3. Once the policy is enabled, start the Apache Cassandra database.