The tutorial for enabling TLS/SSL encryption in Cloud Manager (applies to Ops Manager as well) does not make it clear that both sections on the page should be implemented and applied before performing "Review & Deploy" one time for both.

https://docs.cloudmanager.mongodb.com/tutorial/enable-ssl-for-a-deployment/

The sections are:

• Ensure Existing Deployments are Using SSL
• Enable SSL for the Group

While the instructions to Click Review & Deploy to review your changes. are only present at the bottom of the tutorial, many customers are accustomed to using Review & Deploy after any set of changes.

The recommendation is to place a warning to the user either before those sections or after the first one that indicates they should be deployed together and not individually.