Backing up NiFi keystore and truststore settings
If your CFM installation from which you are upgrading is TLS enabled, use the Encrypt Config tools to back up your NiFi keystore and truststore settings. You will set these values in Cloudera Manager once you complete the upgrade.
If JAVA_HOME is not set, you should set it before proceeding. The default path is /usr/java/default.
The encrypt-config.sh output will be similar to:
keystore=/var/lib/nifi/cert/keystore.jks
keystorePasswd=/TLVwnnFESyIwn2YrBGiVWrANNhiSk
keyPasswd=/TLVwnnFESyIwn2YrBGiVWrANNhiSk
truststore=/var/lib/nifi/cert/truststore.jks
truststorePasswd=4wIWsNhpkVa5MR8P353s3ruMDGj1UL
Once you have completed the backup for NiFi, repeat the same steps for NiFi Registry.