question Re: Error enabling auto tls on cdp 7.1.8 in Support Questions

Error enabling auto tls on cdp 7.1.8

skylarblu4650 — Tue, 21 Apr 2026 06:43:43 GMT

Im on CM 7.10.1, cloudera runtime 7.1.8. I am trying to enable auto tls after creating the cluster, after i input ssh credentials (which are correct), I am getting error "java.lang.IllegalStateException: Failed to run CMCA command, return code: 2"

More info: I have enabled kerberos but have not enabled auto tls yet

Could someone please guide me on how to troubleshoot this issue?

Re: Error enabling auto tls on cdp 7.1.8

skylarblu4650 — Mon, 22 Jan 2024 14:56:14 GMT

Update: I tried setting up the cluster again and enabling auto TLS at cluster creation, facing same error as per screenshot above

Re: Error enabling auto tls on cdp 7.1.8

upadhyayk04 — Fri, 08 Mar 2024 04:33:05 GMT

Hello @skylarblu4650

You might need to check /var/log/cloudera-scm-server/cloudera-scm-server.log to get a clue regarding the error that you are facing.

Also just an FYI 7.10.1 is specifically for the CDP private cloud data services cluster https://supportmatrix.cloudera.com/

Re: Error enabling auto tls on cdp 7.1.8

Rajat_710 — Fri, 08 Mar 2024 06:31:43 GMT

skylarblu4650

also, check the certmanager.log under the agent log directory, which should contain an exception for this issue.

Re: Error enabling auto tls on cdp 7.1.8

Nagarajaiah — Thu, 10 Oct 2024 06:17:21 GMT

This occurs in two scenarios

1. Jdk-11 installed but not provided mod 777
2. jdk-11 not properly extracted and moved

install openjdk11

download the file openjdk-11_linux-x64_bin.tar to /tmp
tar -xf openjdk-11_linux-x64_bin.tar
mv /tmp/jdk-11 /usr/lib/jvm
chmod 777 /usr/lib/jvm/jdk-11

update-alternatives --install "/usr/bin/java" "java" "/usr/lib/jvm/jdk-11/bin/java" 1010
update-alternatives --install "/usr/bin/javac" "javac" "/usr/lib/jvm/jdk-11/bin/javac" 1010
verify > java -version & javac -version

restart cloudera-scm-server