This likely needs attention from Cloudera support. Please open a case through your mycloudera portal.   Regards, Alex  ... View more

There is also an option of "Supported TLS versions" in Cloudera Manager under Security, search for SSL you will get the option of "Supported TLS versions" even after selecting TLSv1.2 from that option our security scans show that few ports from impala and some other services are open. Screenshot of Cloudera Manager is attached.   Regards Hxn ... View more

@hxn Could you enter the password here instead of the the path to keystore pass file?   > SSLKeyStorePwd=/var/lib/cloudera-scm-agent/agent-cert/cm-auto-host_key.pw ... View more

@hxn We should not have any hiveserver2 under "Hive" service. hiveserver2 should be present only under "Hive on Tez".   If you have a hiveserver2 instance under "Hive" service, please delete it. ... View more