Hello @Amos_Chandel  Thank you for reaching out   You can refer the below document for the same   https://docs.cloudera.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Security_Guide/content/ch_wire-https.html Additionally you may want to check the previous discussion regarding the same   https://community.cloudera.com/t5/Support-Questions/Setting-up-SSL-between-different-HDP-components/td-p/117377 Thank you Kshitij Upadhyay ... View more

Hello @namteen ,   The below error indicates there are issues with the certificates or keys. Can you please confirm if all the certificates are signed by the CM valid CA none is expired also the key and host combination that you are providing is correct File "/opt/cloudera/cm-agent/lib/python2.7/site-packages/cmf/tools/cert.py", line 1607, in _write_keystore_file raise Exception("Failed to generate host pkcs12 file.") Exception: Failed to generate host pkcs12 file. You can check /var/log/cloudera-scm-agent/certmanager.log on the CM server host as well to further check the error     >> To check whether the certificate is correct or not run the following command # openssl x509 -in <cert-file> -noout -text To check whether cert and key combination is correct or not match output of below commands #openssl x509 -noout -modulus -in server.pem | openssl md5 #openssl rsa -noout -modulus -in server.key | openssl md5 where server.pem is the certificate and server.key is the key         ... View more