Cloudera Docs

Enabling TLS/SSL for Cloudera Migration Assistant

Learn more about how to enable and configure TLS/SSL for Cloudera Migration Assistant when deploying the Cloudera Migration Assistant server locally or with Docker.

  • Ensure that you have a PKCS12 keystore created with the cma key alias. JKS keystore is also supported.
  1. Click Settings on the homepage of Cloudera Migration Assistant.
  2. Enable TLS/SSL using the checkbox on the TLS Settings page.
  3. Provide the TLS/SSL Certificate in PEM format.
  4. Provide the Private Key in PEM format.
  5. Provide the Private Key Password if the Private Key is encrypted.
  6. Provide the Keystore File Location.
  7. Provide the Keystore File Password.
  8. Select the Keystore Type from the drop-down menu.
  9. Provide a Key Alias.
  10. Provide the Trust Store.
  11. Provide the Trust Store Password.
  12. Provide the Trust Store Type.
  13. Click Save.
  14. Click Restart after saving the TLS/SSL configurtations.
After restarting, the Cloudera Migration Assistant server listens on the default port 8090 (HTTP) and 8093 (HTTPS), and all HTTP requests are redirected to the HTTPS port.