将KDC管理员凭据添加到Ambari凭据存储

HDP升级过程中一直提示这个问题，查找资料发现集群没有打开凭证存储。
创建Ambari的凭证存储

要设置Ambari的凭据存储，必须从Ambari服务器主机的命令行调用以下命令：
ambari服务器设置安全性
然后，使用选项＃2 “加密存储在ambari.properties文件中的密码”来启动该过程：
例：

ambari-server setup-security
Using python /usr/bin/python
Security setup options…
Choose one of the following options:
[1] Enable HTTPS for Ambari server.
[2] Encrypt passwords stored in ambari.properties file.
[3] Setup Ambari kerberos JAAS configuration.
[4] Setup truststore.
[5] Import certificate to truststore.

Enter choice, (1-5): 2
Please provide master key for locking the credential store:
Re-enter master key:
Do you want to persist master key. If you choose not to persist, you need to provide the Master Key while starting the ambari server as an env variable named AMBARI_SECURITY_MASTER_KEY or the start will prompt for the master key. Persist [y/n] (y)? y