https://community.cloudera.com/t5/Support-Questions/Cloudera-agent-SSL-error/m-p/88334#M36445 <P>Did you follow the steps as explained in&nbsp;<A href="https://www.cloudera.com/documentation/enterprise/latest/topics/how_to_configure_cm_tls.html#topic_3" target="_blank" rel="noopener">Enable Server Certificate Verification on Cloudera Manager Agents</A>&nbsp;?</P><P>The agent configuration needs to be given a PEM file for the&nbsp;<EM>verify_cert_file</EM> configuration property which holds the root CA certificate.</P><P>&nbsp;</P><P>To verify the configuration, please run this command on one of the cluster nodes, with &lt;filename&gt; being the full path to file as specified in&nbsp;<EM>verify_cert_file:</EM></P><P>&nbsp;</P><PRE># openssl s_client -CAfile &lt;filename&gt; <SPAN>cmhost.antuit.internal:7182</SPAN></PRE><P>&nbsp;</P> Wed, 27 Mar 2019 13:20:16 GMT gzigldrum 2019-03-27T13:20:16Z