@AadD,   If you can post the command(s) you used to create the CM private key and cert that would help. Also, if you can share the output for keytool -list -v -keystore <keystore> that could help.   Generally, if the server won't start at all, there is a problem with a password or permissions on the JKS file you are using for your Key file or truststore.   When implementing for the first time, only enable TLS for the CM admin console (UI).  If there is a problem using a certificate, it should start up using non-tls and warn you that something's wrong.   Check /var/log/cloudera-scm-server/cloudera-scm-server.log for exceptions or messages pertaining to SSL/TLS.   Cheers,   Ben ... View more