Cloudera Docs

Configure TLS encryption manually for Schema Registry

If you do not want to enable Auto-TLS because for example, you need to use your own enterprise-generated certificates, you can manually enable TLS for Schema Registry.

Ensure you have set up TLS for Cloudera Manager:

  1. Review the requirements and recommendations for the certificates. See TLS Certificate Requirements and Recommendations.
  2. Generate the TLS certificates and configure Cloudera Manager. See Manually Configuring TLS Encryption for Cloudera Manager.
  1. From the Cloudera Manager UI, click Cluster > Schema Registry.


  2. Click the Configuration tab.


  3. Enter ssl in the Search field.
    The Security properties for Schema Registry appear.
  4. Edit the Security properties.
    For example,


  5. Click Save Changes.
  6. Restart the Schema Registry service.