https://community.cloudera.com/t5/Support-Questions/SSL-for-cloudera-manager/m-p/376310#M242852 <P>Hello,</P><P>I'm setting up new cluster for educational purposes and configuring SSL using case 2 "Enabling Auto-TLS with an intermediate CA signed by an existing Root CA ", I just installed cloudera manager and enabled the kerbros using Free IPA &amp; created the certificates using&nbsp;JAVA_HOME=/usr/lib/jvm/java-1.8.0-openjdk /opt/cloudera/cm-agent/bin/certmanager setup --configure-services --stop-at-csr. But when I sign the csr from the IPA server I got the attached error,, Any help please</P><P>Note: I'm using the user that automatically created by cloudera manager when setting the kerbros as principle, for more info &gt;&gt;&nbsp;&nbsp;<A href="https://docs.cloudera.com/cdp-private-cloud-base/7.1.5/security-kerberos-authentication/topics/cm-security-kerberos-enabling-step3-cm-principal.html" target="_blank" rel="noopener">Step 3: Create the Kerberos Principal for Cloudera Manager Server | CDP Private Cloud</A></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-09-14 084046.png" style="width: 677px;"><img src="https://community.cloudera.com/t5/image/serverpage/image-id/38456i071E957E8769FE52/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2023-09-14 084046.png" alt="Screenshot 2023-09-14 084046.png" /></span></P> Tue, 21 Apr 2026 06:48:49 GMT JobBranwl 2026-04-21T06:48:49Z https://community.cloudera.com/t5/Support-Questions/SSL-for-cloudera-manager/m-p/376310#M242852 <P>Hello,</P><P>I'm setting up new cluster for educational purposes and configuring SSL using case 2 "Enabling Auto-TLS with an intermediate CA signed by an existing Root CA ", I just installed cloudera manager and enabled the kerbros using Free IPA &amp; created the certificates using&nbsp;JAVA_HOME=/usr/lib/jvm/java-1.8.0-openjdk /opt/cloudera/cm-agent/bin/certmanager setup --configure-services --stop-at-csr. But when I sign the csr from the IPA server I got the attached error,, Any help please</P><P>Note: I'm using the user that automatically created by cloudera manager when setting the kerbros as principle, for more info &gt;&gt;&nbsp;&nbsp;<A href="https://docs.cloudera.com/cdp-private-cloud-base/7.1.5/security-kerberos-authentication/topics/cm-security-kerberos-enabling-step3-cm-principal.html" target="_blank" rel="noopener">Step 3: Create the Kerberos Principal for Cloudera Manager Server | CDP Private Cloud</A></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot 2023-09-14 084046.png" style="width: 677px;"><img src="https://community.cloudera.com/t5/image/serverpage/image-id/38456i071E957E8769FE52/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot 2023-09-14 084046.png" alt="Screenshot 2023-09-14 084046.png" /></span></P> Tue, 21 Apr 2026 06:48:49 GMT https://community.cloudera.com/t5/Support-Questions/SSL-for-cloudera-manager/m-p/376310#M242852 JobBranwl 2026-04-21T06:48:49Z https://community.cloudera.com/t5/Support-Questions/SSL-for-cloudera-manager/m-p/386891#M246179 <P>hi,&nbsp;<a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/99381">@JobBranwl</a>&nbsp;not sure how free IPA works, but it looks like whichever user you are using to generate this cart does not match the certificate CommanName i.e., CN. You might need to check on that part.</P> Mon, 22 Apr 2024 06:38:58 GMT https://community.cloudera.com/t5/Support-Questions/SSL-for-cloudera-manager/m-p/386891#M246179 Rajat_710 2024-04-22T06:38:58Z