# Adding certificates to Fleet Server

**URL:** <https://discuss.elastic.co/t/adding-certificates-to-fleet-server/303586>\
**Category:** Elasticsearch\
**Tags:** fleet\
**Created:** [April 29, 2022, 9:06am UTC](https://discuss.elastic.co/t/adding-certificates-to-fleet-server/303586 "2022-04-29T09:06:30Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mhoward](https://avatars.discourse-cdn.com/v4/letter/m/4da419/32.png) [@mhoward](https://discuss.elastic.co/u/mhoward)\
**Post date:** [April 29, 2022, 9:06am UTC](https://discuss.elastic.co/t/adding-certificates-to-fleet-server/303586/1 "2022-04-29T09:06:30Z")

</div>

I'm in the process of getting Fleet added to my Elastic cluster. I have a Fleet server and have enrolled the Fleet server using Quick Start for handling certificates when enrolling because I was having issues with certutil. I've finally managed to get a certificate working and have a CRT and key so I'm ready to add them to the Fleet server enrollment. At this point, I have two questions I'm stuck on:

1. Do any of the 4 cert files needed for enrollment (ca.crt, fleet-server.crt, fleet-server.key, Elasticsearch-ca.crt) need to be copied to the Fleet server itself? I currently have them on the server with Elasticsearch installed where I generated the cert with certutil. I'm following the [Encrypt traffic in clusters with a self-managed Fleet Server](https://www.elastic.co/guide/en/fleet/7.17/secure-connections.html) page and am confusing myself on what goes where.
2. Am I able to add the certificates to my enrollment even though I chose Quick Start at enrollment, or would I need to unenroll Fleet server and enroll again choosing Production for deployment mode? If I am able to add the certs without re-enrolling, how do I go about doing that?

Thanks so much!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 27, 2022, 9:06am UTC](https://discuss.elastic.co/t/adding-certificates-to-fleet-server/303586/2 "2022-05-27T09:06:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.