Configuration summary

YARN advanced TLS control properties define default cluster configurations for SSL/TLS versions, cipher suite inclusion lists, and HTTPS application policies in Cloudera Manager.

Feature / Control Location Underlying Property Default Behavior
Supported TLS Versions Cloudera Manager > YARN > Configuration > Supported SSL/TLS Versions hadoop.ssl.enabled.protocols Copy from Global Settings (inherits cluster-wide TLS version)
Cipher Suite Inclusion List Cloudera Manager > YARN > Configuration > TLS Cipher Suite Inclusion List ssl.server.include.cipher.list Copy from Global Settings (inherits cluster-wide cipher list)
RM HTTPS Application Policy Configured automatically on ResourceManager role when encrypt-all-ports is active. yarn.resourcemanager.application-https.policy Set to LENIENT