Finally It works, here are what I did, it could help someone else. Generate .csr and . key file (described here https://community.hortonworks.com/articles/39865/enabling-https-for-ambariserver-and-troubleshootin.html) Request a certificate using MS AD web enrolment service as follwing: Copy and past the the .csr content generate in step 1. The ouput is a .cer file. Change the .cer file to .csr Copy and the new .csr to ambari server Use ambari-server setup-security to configure https ... View more

@Jay Kumar SenSharma, No I don't want to use an openssl self signed certificate as describing in the link. But I would like to sign the openssl certifcate by my MS AD. ... View more

@Jay Kumar SenSharma, Thanks for your answer. Before configure trustore, I though that I need to sign my certificates with MS AD. For doing this, here are my questions: Do I need to sign my previous ambari_fqdn.csr file or ambari_fqdn.crt file? what will be the output from MS AD (.csr or .cer or .crt file?) To configure the trustore, what certificate need to be used (the new one signed by MS AD or the existing one)? ... View more