Cloudera Docs

Configuring TLS encryption manually for Schema Registry

If you do not want to enable Auto-TLS, because, for example, you need to use your own enterprise-generated certificates, you can manually enable TLS for Schema Registry.

Ensure that you have set up TLS for Cloudera Manager:

  1. Review the requirements and recommendations for the certificates.

    For more information, see TLS Certificate Requirements and Recommendations.

  2. Generate the TLS certificates and configure Cloudera Manager.

    For more information, see Manually Configuring TLS Encryption for Cloudera Manager.

  1. From the Cloudera Manager UI, click Cluster > Schema Registry.


  2. Click Configuration.


  3. Enter ssl in the Search field.
    The security properties for Schema Registry appear.
  4. Edit the security properties.
    For example:


  5. Click Save Changes.
  6. Restart the Schema Registry service.