Hello, The AD certificate goes in the JVM keystore on CM: 1. On the domain controller, export the certificate in the "Base-64 encoded X.509 (.CER) format. 2. Copy the file to the Cloudera Manager host using an SCP/SSH tool such as WinSCP. 3. Import the certificate into your JVM keystore: keytool -import -alias <alias-for-cert> -file <path-to-cert> -keystore <path-to-keystore> -storepass <keystore password> Note: The truststore is usually located at: $JAVA_HOME/jre/lib/security/cacerts.
... View more
