Using CTE with an Apache Cassandra Database
This document describes how to integrate CTE with an Apache Cassandra database.
Test Environment
-
CTE Agent: 7.2.0 and 7.3.0
-
CipherTrust Manager: 2.8.0, 2.9.0, and 2.10.0
-
OS: Ubuntu 20.04 and Ubuntu 18
-
Apache Cassandra version: 3.6.8
-
File System: XFS and EXT4
Steps
To integrate CTE with an Apache Cassandra database, install and register the CTE Agent and create appropriate GuardPoints.
Install and Register the CTE Agent
-
Install the CTE Agent on the client machine where the Apache Cassandra database is installed and configured.
-
Register the CTE Agent with the CipherTrust Manager.
Refer to CTE - Agent Quick Start Guide for details.
Create the GuardPoints
Perform the following steps on the CTE client.
-
On the CTE client, stop the Apache Cassandra database.
-
On the CipherTrust Manager, create a GuardPoint. While creating the GuardPoint:
-
Enter the Path,
/var/lib/33buntu33ra/data. -
Select the Policy Type. You can select Standard or Live Data Transformation (LDT).
Note
Set the Key Selection Rules of the LDT policy as AES 256.
-
Create a User Set with user
cassandb, and give user the permission to perform all Actions and Effects. The default access is No Access.
Refer to Creating GuardPointsfor details.
-
-
Once the policy is enabled, start the Apache Cassandra database.
