Today I ran into this same issue but the solutions in the post didn't resolve the problem.  I found each time you would start cloudera-scm-server (sudo systemctl start cloudera-scm-server) it would just add the entries back to the database we are instructed to delete.     The following did resolve the problem - Edit /var/lib/cloudera-scm-server/certmanager/cm_init.txt Change the following top 3 lines from true to false as follows. setsettings AGENT_TLS false setsettings WEB_TLS false setsettings NEED_AGENT_VALIDATION false   Then stop and start the cloudera-scm-server. This time you will see the entries back in the DB but they'll be set to false. On the database server you can run the following to confirm they are set to false now. select * from CONFIGS where ATTR='web_tls'; select * from CONFIGS where ATTR='agent_tls'; ... View more