I found this very helpful post during my task to enable TLS with our corporate CA and had the same problem. To make it a little more complicated, we have the Hue Load Balancer enabled additional to the normal Hue server. With the load balancer, an apache webserver is put in front of the cherrypi webserver. So the configuration for the intermediate certificate has to be put in the httpd.conf of the loadbalancers apache.   This can be done with Cloudera Manager with the Load Balancer Advanced Configuration Snippet (Safety Valve) for httpd.conf entry of the Hue load balancer configuration. Just add the following line: SSLCertificateChainFile /path/to/intermediate.crt It will be added right next to the SSL certificate configuration that could be done via the normal configuraiton fields of the load balancer.   As with in Isegrims post, the certificate must follow the rules for a PEM file, in fact, the same file can be used by both webservers.   ... View more