Hi @mbigelow - Can you please how to achieve this and what are the steps to do that "Is there an ssl certificate for the HAProxy and is it configured to use it. Is the CA cert for it in the PEM file that Impala is configured to use?" i have created the LB certificate where i have SAN entries for all daemons, impala server, & LB But still the below error impala-shell -i lb_url.com -d default -k --ssl --ca_cert=certificate.pem Starting Impala Shell using Kerberos authentication Using service name 'impala' SSL is enabled Error connecting: TTransportException, Certificate error with remote host: hostname '' doesn't match 'impala-daemon-1' *********************************************************************************** Welcome to the Impala shell. (Impala Shell v3.4.0-SNAPSHOT (91716c9) built on ) You can change the Impala daemon that you're connected to by using the CONNECT command.To see how Impala will plan to run your query without actually executing it, use the EXPLAIN command. You can change the level of detail in the EXPLAIN output by setting the EXPLAIN_LEVEL query option. *********************************************************************************** [Not connected] >   impala-shell -i lb_url.com -d default -k --ssl --ca_cert=certificate.pem Starting Impala Shell using Kerberos authentication Using service name 'impala' SSL is enabled Error connecting: TTransportException, Certificate error with remote host: hostname '' doesn't match 'impala-daemon-2' *********************************************************************************** Welcome to the Impala shell. (Impala Shell v3.4.0-SNAPSHOT (91716c9) built on ) You can change the Impala daemon that you're connected to by using the CONNECT command.To see how Impala will plan to run your query without actually executing it, use the EXPLAIN command. You can change the level of detail in the EXPLAIN output by setting the EXPLAIN_LEVEL query option. *********************************************************************************** [Not connected] > ... View more