Dell Data Lakehouse: How to Decrypt an Encrypted TLS Key

While configuring the Dell Data Processing Engine, you are required to provide private TLS key data in the TLS Key field. However, the key is not accepted, and you receive the following error:

Invalid format: Must be a valid .pem format.

This typically occurs when the key.pem file is encrypted with a passphrase.

The error occurs because the provided TLS key is encrypted and the Dell Data Processing Engine cannot parse it. Encrypted TLS keys are often protected with a passphrase and must be decrypted to convert them into a valid .pem format that the system can accept.

1. Obtain the Encrypted Key - Ensure that you have the encrypted key file, typically with a .pem or .key extension.
2. Install OpenSSL - If OpenSSL is not already installed, download, and install it from the OpenSSL website .
3. Decrypt the Key - Open a terminal or command prompt and run the following command:

openssl rsa -in <encrypted_key.pem> -out <decrypted_key.pem>

1. Replace <encrypted_key.pem> with the name of your encrypted key file.
2. <decrypted_key.pem> is the output file containing the decrypted key.
3. You are prompted to enter the passphrase if the key is protected.

4. Verify the Decrypted Key - Open the decrypted_key.pem file in a text editor. It should begin with:

-----BEGIN PRIVATE KEY-----

If it begins with:

-----BEGIN RSA PRIVATE KEY-----

Then the key is still encrypted.

5. Example Output

ddae660-udslab-ctl-01:/home/mycerts # openssl rsa -in ddpe-sprk.tls.key -out decrypt.key
writing RSA key

ddae660-udslab-ctl-01:/home/mycerts # cat decrypt.key

6. Copy the contents of decrypted.key and paste them into the TLS Key field in the Dell Data Processing Engine configuration.