Cloudera Docs

Turning off TLS regeneration

Learn how to turn off forced TLS regeneration before you upgrade to CFM 2.0.1.

The NiFi CA is not installed as part of CFM 2.0.1. You must turn off NiFi CA Force Regenerate before proceeding with your upgrade. Once you have completed the upgrade, Cloudera recommends that you use Auto-TLS for your CDP Data Center cluster.

  1. From Cloudera Manager, click the Clusters tab in the left-hand navigation
  2. Click NiFi in the list of services to display the NiFi service page.
  3. Select the Configuration tab.
  4. Deselect the TLS regeneration check-box.

Once you have turned off TLS regeneration, back up your keystore and truststore values for NiFi and NiFi Registry, and then proceed with the upgrade to CFM 2.0.1.