Enable TLS for the MySQL ClientEnable TLS between TiDB ComponentsEnable TLS for DMReplicate Data to TLS-enabled Downstream ServicesRenew and Replace the TLS CertificateRun Containers as a Non-root User