Step 4: Install and configure databases

Install and configure the databases.

Configure the database in a FIPS-compliant manner. Consult the vendor documentation for your database for details.
Enable the database for TLS/SSL clients, to ensure that all Java Database Connectivity (JDBC) connections into these databases are FIPS compliant. Consult the vendor documentation for your database for details.
Configure JDBC Driver in a FIPS compliant manner with TLS/SSL and Bouncy Castle FIPS Keystore (BCFKS) formats provided by CCJ JCE provider. Consult the following Cloudera Knowledge Base article for more information: Configuring SSL/TLS from the various CDH Services to their respective PostgreSQL Databases.
Complete the setup of your databases for use with Cloudera Manager and Cloudera Runtime components. See Install and Configure PostgreSQL for Cloudera.

note
Starting from Cloudera Runtime 7.1.9 SP1, if you are using PostgreSQL as a backend database for Hue on a FIPS cluster, you must install a version of the psycopg2 package from the source to be at least 2.9.5 on all Hue hosts because the psycopg2-binary package uses its version of the libssl library file which does not support FIPS. See Installing the psycopg2 Python package for PostgreSQL database on a FIPS cluster (RHEL 8).