Auto-TLS greatly simplifies the process of enabling and managing TLS encryption on your cluster.
Auto-TLS automates the creation of an internal certificate authority (CA) and deployment of certificates across all cluster hosts. It can also automate the distribution of existing certificates, such as those signed by a public CA. Adding new cluster hosts or services to a cluster that is Auto-TLS enabled, automatically creates and deploys the required certificates.
In CDP, Auto-TLS is enabled by default.
For more information about Auto-TLS, see Configuring TLS Encryption for Cloudera Manager Using Auto-TLS.