question Re: Errors when Enable Auto-TLS (CDP private cloud base 7.1.6) in Support Questions

Errors when Enable Auto-TLS (CDP private cloud base 7.1.6)

Ismail27 — Tue, 21 Apr 2026 08:03:44 GMT

Hi,

Has anyone come across such a problem when enabling Auto-TLS?

Thanks appreciate your comments

java.lang.IllegalStateException: Failed to run CMCA command, return code: 2
	at com.cloudera.cmf.command.CertmanagerRunner.runCmcaCommand(CertmanagerRunner.java:55)
	at com.cloudera.cmf.command.GenerateCmcaCmdWork.runSetupCmcaCommand(GenerateCmcaCmdWork.java:65)
	at com.cloudera.cmf.command.GenerateCmcaCmdWork.doWork(GenerateCmcaCmdWork.java:202)
	at com.cloudera.cmf.command.flow.CmdStep.doWork(CmdStep.java:178)
	at com.cloudera.cmf.command.flow.SeqCmdWork.doWork(SeqCmdWork.java:107)
	at com.cloudera.cmf.command.flow.CmdStep.doWork(CmdStep.java:178)
	at com.cloudera.cmf.command.flow.SeqFlowCmd.run(SeqFlowCmd.java:117)
	at com.cloudera.cmf.command.CmdWorkCommand.execute(CmdWorkCommand.java:107)
	at com.cloudera.cmf.service.ServiceHandlerRegistry.executeGlobalCommandHelper(ServiceHandlerRegistry.java:865)
	at com.cloudera.cmf.service.ServiceHandlerRegistry.executeGlobalCommand(ServiceHandlerRegistry.java:833)
	at com.cloudera.server.cmf.components.OperationsManagerImpl$4.get(OperationsManagerImpl.java:1969)
	at com.cloudera.server.cmf.components.OperationsManagerImpl$4.get(OperationsManagerImpl.java:1966)
	at com.cloudera.server.web.cmf.AuthScopeContext.privilegedMode(AuthScopeContext.java:198)
	at com.cloudera.server.cmf.components.OperationsManagerImpl.executeCmd(OperationsManagerImpl.java:3198)
	at com.cloudera.server.cmf.components.OperationsManagerImpl.executeGlobalCmd(OperationsManagerImpl.java:1966)

Re: Errors when Enable Auto-TLS (CDP private cloud base 7.1.6)

GangWar — Mon, 06 Dec 2021 18:34:53 GMT

@Ismail27 The user you are specifying "admin", does this have root access on CM host? I believe you are providing the Cloudera Manager UI user but here you need SSH user i.e root which have same root privileges on host to run CMCA commands then only it can work.

Re: Errors when Enable Auto-TLS (CDP private cloud base 7.1.6)

rvillab — Mon, 31 Oct 2022 13:07:42 GMT

I have same issue with Cloudera 7.4.4 installation. I try with server users, like root, and other users with the same result. I try SSH connection with these users, and i haven't problems.

Re: Errors when Enable Auto-TLS (CDP private cloud base 7.1.6)

Loaimohamed79 — Wed, 07 Feb 2024 13:23:42 GMT

I have the same error while using root user.

Re: Errors when Enable Auto-TLS (CDP private cloud base 7.1.6)

Loaimohamed79 — Wed, 07 Feb 2024 13:24:39 GMT

have any solution for this error?

Re: Errors when Enable Auto-TLS (CDP private cloud base 7.1.6)

DianaTorres — Wed, 07 Feb 2024 19:28:46 GMT

@Loaimohamed79 Welcome to the Cloudera Community!
As this is an older post, you would have a better chance of receiving a resolution by starting a new thread. This will also be an opportunity to provide details specific to your environment that could aid others in assisting you with a more accurate answer to your question. You can link this thread as a reference in your new post. Thanks.

Re: Errors when Enable Auto-TLS (CDP private cloud base 7.1.6)

veerak — Fri, 28 Jun 2024 02:41:42 GMT

Solution: Trusted CA Certificates Location should be the file path. (The full file path containing a concatenated list of CA certificates in pem format).

I came across the same issue and resolved.

Re: Errors when Enable Auto-TLS (CDP private cloud base 7.1.6)

Nagarajaiah — Thu, 10 Oct 2024 06:11:06 GMT

This occures in two scenarios

1. Jdk-11 installed but not provided mod 777
2. jdk-11 not properly extracted and moved

install openjdk11

download the file openjdk-11_linux-x64_bin.tar to /tmp
tar -xf openjdk-11_linux-x64_bin.tar
mv /tmp/jdk-11 /usr/lib/jvm
chmod 777 /usr/lib/jvm/jdk-11

update-alternatives --install "/usr/bin/java" "java" "/usr/lib/jvm/jdk-11/bin/java" 1010
update-alternatives --install "/usr/bin/javac" "javac" "/usr/lib/jvm/jdk-11/bin/javac" 1010
verify > java -version & javac -version

restart cloudera-scm-server

Re: Errors when Enable Auto-TLS (CDP private cloud base 7.1.6)

Nagarajaiah — Thu, 10 Oct 2024 06:14:37 GMT

This occurs in two scenarios

1. Jdk-11 installed but not provided mod 777
2. jdk-11 not properly extracted and moved

install openjdk11

download the file openjdk-11_linux-x64_bin.tar to /tmp
tar -xf openjdk-11_linux-x64_bin.tar
mv /tmp/jdk-11 /usr/lib/jvm
chmod 777 /usr/lib/jvm/jdk-11