> For the complete documentation index, see [llms.txt](https://docs.collibra.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.collibra.com/data-quality-self-hosted/connections/supported-connections/supported-jdbc-data-sources/connecting-to-hive/connecting-to-cdh-5-16-hive-ssl-tls-kerberos-setup.md).

# Connecting to CDH 5.16 Hive SSL/TLS/Kerberos Setup

The Cloudera Hive JDBC drivers used <https://www.cloudera.com/downloads/connectors/hive/jdbc/2-5-16.html>

### JDBC Connection String used

jdbc:hive2://cdh-instance1.us-east1-b.c.owl-hadoop-cdh.internal:10000/default;AuthMech=1;KrbHostFQDN=cdh-instance1.us-east1-b.c.owl-hadoop-cdh.internal;KrbRealm=CW\.COM;KrbServiceName=hive;SSL=1;SSLKeyStore=/opt/cloudera/security/pki/cdh-instance1.us-east1-b.c.owl-hadoop-cdh.internal-server.jks;AllowSelfSignedCerts=1;SSLKeyStorePwd=password;principal=hive/cdh-<instance1.us-east1-b.c.owl-hadoop-cdh.internal@CW.COM>

### What does each option mean

**Base connection string** **=** jdbc:hive2://cdh-instance1.us-east1-b.c.owl-hadoop-cdh.internal:10000/default

**Authentication identifier** **=** AuthMech=1 (which states Kerberos)

**Kerberos Hive Server FQDN** **=** KrbHostFQDN=cdh-instance1.us-east1-b.c.owl-hadoop-cdh.internal

**Kerberos Realm used =** KrbRealm=CW\.COM *(Not necessarily needed)*

**Kerberos Service name =** KrbServiceName=hive

**Enabling SSL =** SSL=1

**The SSL KeyStore to be used to =** SSLKeyStore=/opt/cloudera/security/pki/cdh-instance1.us-east1-b.c.owl-hadoop-cdh.internal-server.jks *(Could use SSLTrustStore also)*

**Allow for Self Signed certifications to be OK =** AllowSelfSignedCerts=1 *(our environment used self signed certs)*

**Password to the KeyStore =** SSLKeyStorePwd=password *(Not necessarily needed)*

**Kerberos Principal to use to Authenticate with =** principal=hive/cdh-<instance1.us-east1-b.c.owl-hadoop-cdh.internal@CW.COM>

### Within the Collibra DQ Web UI you have to specify the following

**Name =** hivessl

**Connection URL =** jdbc:hive2://cdh-instance1.us-east1-a.c.owl-hadoop-cdh.internal:10000/default;AuthMech=1;KrbHostFQDN=cdh-instance1.us-east1-b.c.owl-hadoop-cdh.internal;KrbRealm=CW\.COM;KrbServiceName=hive;SSL=1;SSLKeyStore=/opt/cloudera/security/pki/cdh-instance1.us-east1-b.c.owl-hadoop-cdh.internal-server.jks;AllowSelfSignedCerts=1;SSLKeyStorePwd=password;principal=hive/cdh-<instance1.us-east1-b.c.owl-hadoop-cdh.internal@CW.COM>

**Port =** 10000

**Driver Name =** `com.cloudera.hive.jdbc.HS2Driver`

**Username =** <userspark@CW.COM>

**Password =** password