Turn off TLS regeneration

Learn how to turn off forced TLS regeneration before you upgrade from CFM 1.1.0 to 2.0.x.

The NiFi CA is not installed as part of CFM 2.0.x. You must turn off NiFi CFM upgrade edits CA Force Regenerate before proceeding with your upgrade. Once you have completed the upgrade, Cloudera recommends that you use Auto-TLS for your CDP Data Center cluster.

  1. From Cloudera Manager, click the Clusters tab in the left-hand navigation
  2. Click NiFi in the list of services to display the NiFi service page.
  3. Select the Configuration tab.
  4. Deselect the TLS regeneration check-box.
  5. Repeat these steps for NiFi Registry.

Once you have turned off TLS regeneration, backup your keystore and truststore values for NiFi and NiFi Registry, and then proceed with the upgrade to CFM 2.0.x.