KNOWLEDGE BASE

Error "[Cloudera][DriverSupport] (1140) Unable to load CA certificates from certs file location" connecting to Cloudera Hadoop Hive


Published: 13 May 2021
Last Modified Date: 14 May 2021

Issue

When connecting to SSL enabled Cloudera Hadoop Hive from Tableau Desktop, the following error occurs:

Can't connect to datasource. An error occurred while communicating with Cloudera Hadoop

[Cloudera][DriverSupport] (1140) Unable to load CA certificates from certs file location.  Please ensure the file exists, has read permission, and has the correct PEM format.


The same issue also happens when

  •  Opening the workbook downloaded from Tableau Server.
  •  Run the flow on Tableau Server

Environment

  • Tableau Linux Server
  • Tableau Desktop
  • Tableau Prep
  • Cloudera Hadoop Hive with SSL enabled

Resolution

  1. In Tableau Server machine, overwrite the cacerts.pem file that was installed with odbc drivers with the pem file created for the Cloudera Hadoop Hive database
    • (Tableau Server for Linux): /opt/cloudera/impalaodbc/lib/64/cacerts.pem
    • For the change on Tableau Cluster environment, please repeat the same steps to all nodes using  processes that make data source connections (Backgrounder, Data Server, Vizportal, VizQL Server).
  2. In Tableau Desktop and Prep hosted machine, overwrite the cacerts.pem located in C:\Program Files\Cloudera ODBC Driver for Impala\lib, with the pem file created for the Cloudera Hadoop Hive database
  3. Avoid using tdc file when connecting to Hadoop database from Tableau Prep. Ensure there is no tdc file located at My Tableau Prep Repository\Datasources folder
  4. Save a copy of the .pem certificate from the database server to the computer running Tableau Desktop. Download and edit the TDC file to specify the file path to the trusted certificates (double quotation marks not required), and then add the .tdc file to: My Tableau Repository\Datasources folder.

Cause

Tableau cannot find the required SSL certificate.
Did this article resolve the issue?