@VijayM wrote: Hello Team,   We have CDH 5.15 cluster running and have kerberos and TLS enabled for all services in the cluster.   We would like to enable for Hiveserver2 using haproxy load balancer.   We have enable HA for hivemetastore using below link. 2 instance of hive metastore is up and running. https://www.cloudera.com/documentation/enterprise/5-15-x/topics/admin_ha_hivemetastore.html   Refering below link for hiveserver2 ha.   https://www.cloudera.com/documentation/enterprise/5-15-x/topics/admin_ha_hiveserver2.html   haproxy, 1 instance of hive metastore, 1 instance of hiveserver2 installed krogerfeedback on same node.   beeline throws below error.   beeline> !connect jdbc:hive2://abc:10001/default;ssl=true;sslTrustStore=/app/bds/security/pki/cloudera_truststore.jks;sslTrustPassword=xxxxx;principal=hive/aabc@REALM Connecting to jdbc:hive2://abc:10001/default;ssl=true;sslTrustStore=/app/bds/security/pki/cloudera_truststore.jks;sslTrustPassword=xxxxx;principal=hive/aabc@REALM Unknown HS2 problem when communicating with Thrift server. Error: Could not open client transport with JDBC Uri: jdbc:hive2://abc:10001/default;ssl=true;sslTrustStore=/app/bds/security/pki/cloudera_truststore.jks;sslTrustPassword=xxxxxx;principal=hive/aabc@REALM: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake (state=08S01,code=0)     Below snap for haproxy config   # This is the setup for HS2. beeline client connect to load_balancer_host:10001. # HAProxy will balance connections among the list of servers listed below. listen hiveserver2 :10001 mode tcp option tcplog balance source server hiveserver2_1 abc:10000 server hiveserver2_2 xyz:10000     Kindly suggest?     - Vijay M This is getting really complicated for me, please help! ... View more