My Oracle Support Banner

How to Renew the Default Self-Signed Certificates on BDA V4.3 and Higher (Doc ID 2365807.1)

Last updated on JANUARY 05, 2022

Applies to:

Big Data Appliance Integrated Software - Version 4.3.0 and later
Linux x86-64


This note details how to renew the default self-signed certificates on BDA V4.3 and higher if they have expired or are close to expiring.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
 Frequently Asked Questions.
 Known Issues
 Steps to Renew Default Self-Signed Certificates
 Verify Cluster Health
 Backup /opt/cloudera/security
 Backup /etc/cloudera-scm-agent
 Renew Certificates on the Cluster Via the Regenerate Script
 Steps to Update Certificates on Non-BDA Edge Nodes Which are Part of the Cluster
 Restart the Cluster
 Final Verifications
 Post Renewal Check
 What To Do if Something Goes Wrong with Certificate Renewal Steps

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.