Hello @namteen ,   The below error indicates there are issues with the certificates or keys. Can you please confirm if all the certificates are signed by the CM valid CA none is expired also the key and host combination that you are providing is correct File "/opt/cloudera/cm-agent/lib/python2.7/site-packages/cmf/tools/cert.py", line 1607, in _write_keystore_file raise Exception("Failed to generate host pkcs12 file.") Exception: Failed to generate host pkcs12 file. You can check /var/log/cloudera-scm-agent/certmanager.log on the CM server host as well to further check the error     >> To check whether the certificate is correct or not run the following command # openssl x509 -in <cert-file> -noout -text To check whether cert and key combination is correct or not match output of below commands #openssl x509 -noout -modulus -in server.pem | openssl md5 #openssl rsa -noout -modulus -in server.key | openssl md5 where server.pem is the certificate and server.key is the key         ... View more