Cloudera Docs

Turning off TLS regeneration

The NiFi CA is not installed as part of CFM 2.1.5. You must turn off NiFi CFM upgrade edits CA Force Regenerate before proceeding with your upgrade.

You have reviewed the following Before you upgrade information and are sure that you are performing the right upgrade for your use case.

  • CFM migration and upgrade options
  • Upgrade paths
  • Supported CDP Private Cloud Base cluster versions
  1. From Cloudera Manager, click the Clusters tab in the left-hand navigation
  2. Click NiFi in the list of services to display the NiFi service page.
  3. Select the Configuration tab.
  4. Deselect the TLS regeneration check-box.
  5. Repeat these steps for NiFi Registry.

Once you have turned off TLS regeneration, back up your keystore and truststore values for NiFi and NiFi Registry, and then proceed with the upgrade to CFM 2.1.5.

Once you have completed the upgrade, Cloudera recommends that you use Auto-TLS for your CDP Private Cloud Base cluster.