Cloudera Docs

Manually updating Let's Encrypt certificate in Cloudera Data Warehouse

Learn about manually updating the Let’s Encrypt certificate in the Cloudera Data Warehouse service UI for clusters deployed in the AWS environment.

Cloudera Data Warehouse supports Let's Encrypt certificates. These certificates automatically refresh 30 days before expiration, ensuring continuous security without manual intervention. Using the Renew Ingress Certificate option in the UI triggers an immediate certificate refresh.

The autorefresh and manual refresh options are available only for environments running version 1.11.2 or higher. Additionally, Let's Encrypt certificate is supported only for clusters running version 1.11.2 or higher.

  1. In the Cloudera Data Warehouse service, go to the Environments tab.
  2. Locate the environment that you want to view.
  3. Click > Details.
  4. Go to the Configurations tab.
  5. Enable the Renew Ingress Certificate.

    The option automatically disables after a successful renewal.

  6. Validate the configuration by launching a Hue Virtual Warehouse or Grafana dashboard and viewing the certificate details to check the new expiration date.