# Can not create certificates for elasticsearch **URL:** \ **Category:** Elastic Security\ **Created:** [February 17, 2024, 5:35pm UTC](https://discuss.elastic.co/t/can-not-create-certificates-for-elasticsearch/353509 "2024-02-17T17:35:43Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Yerbolat\_Talasbekov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yerbolat_talasbekov/32/121818_2.png) [@Yerbolat\_Talasbekov](https://discuss.elastic.co/u/Yerbolat_Talasbekov)\ **Post date:** [February 17, 2024, 5:35pm UTC](https://discuss.elastic.co/t/can-not-create-certificates-for-elasticsearch/353509/1 "2024-02-17T17:35:43Z")
Hello, can somebody help me with certificate creation? Here is my screens ![изображение](https://us1.discourse-cdn.com/elastic/original/3X/8/a/8a32bb0bd910e743cb23ddfa785bf56db8a7a345.png) ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [February 17, 2024, 11:52pm UTC](https://discuss.elastic.co/t/can-not-create-certificates-for-elasticsearch/353509/2 "2024-02-17T23:52:04Z")
Hi @Yerbolat_Talasbekov Welcome to the Community! 1st please do not post images of text, the are hard to read , debug, search and some people can not event see them. First question is What version? How did you install? Exactly What Command are you running? From Exactly what Directory? And is the ca file (ohh yeah see I can not cut-n-paste it because and image) in the right place and readable I would use a full path to the ca file not relarive ---
**Author:** ![Yerbolat\_Talasbekov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yerbolat_talasbekov/32/121818_2.png) [@Yerbolat\_Talasbekov](https://discuss.elastic.co/u/Yerbolat_Talasbekov)\ **Post date:** [February 18, 2024, 3:11am UTC](https://discuss.elastic.co/t/can-not-create-certificates-for-elasticsearch/353509/3 "2024-02-18T03:11:48Z")
Hi sir , I am new to ELK stack , can you help me to secure ELK. Can not understand what certifications i need to generate. For example to secure filebeat and elasticsearch, or filebeat and logstash. ---
**Author:** ![Yerbolat\_Talasbekov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yerbolat_talasbekov/32/121818_2.png) [@Yerbolat\_Talasbekov](https://discuss.elastic.co/u/Yerbolat_Talasbekov)\ **Post date:** [February 18, 2024, 3:12am UTC](https://discuss.elastic.co/t/can-not-create-certificates-for-elasticsearch/353509/4 "2024-02-18T03:12:34Z")
and how to generate this certifications. ---
**Author:** ![Yerbolat\_Talasbekov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yerbolat_talasbekov/32/121818_2.png) [@Yerbolat\_Talasbekov](https://discuss.elastic.co/u/Yerbolat_Talasbekov)\ **Post date:** [February 18, 2024, 3:14am UTC](https://discuss.elastic.co/t/can-not-create-certificates-for-elasticsearch/353509/5 "2024-02-18T03:14:32Z")
My elasticsearch version is 8.12.1, and I installed it with rpm packet on CentOS 7. ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [February 18, 2024, 4:12am UTC](https://discuss.elastic.co/t/can-not-create-certificates-for-elasticsearch/353509/6 "2024-02-18T04:12:48Z")
If you installed with package all the certificate were created for you automatically. Did you follow the official documentation? I would read it carefully and follow the steps carefully Here > **[Install Elasticsearch with RPM | Elasticsearch Guide \[8.12\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html)** Everything is setup for you and displayed to the console. ---
**Author:** ![Yerbolat\_Talasbekov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yerbolat_talasbekov/32/121818_2.png) [@Yerbolat\_Talasbekov](https://discuss.elastic.co/u/Yerbolat_Talasbekov)\ **Post date:** [February 18, 2024, 6:58am UTC](https://discuss.elastic.co/t/can-not-create-certificates-for-elasticsearch/353509/7 "2024-02-18T06:58:09Z")
Sir, at the begin I wanted to to send nginx logs in filebeat by nhinx module, when I wrote the command filebeat setup -e the output was: Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: [error connecting to Elasticsearch at https: // X.X.X.X: 9200: Get https:// X.X.X.X :9200: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "Elasticsearch security auto-configuration HTTP CA")] I tried to recreate certificates again but unsuccesfully.... ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [February 18, 2024, 2:39pm UTC](https://discuss.elastic.co/t/can-not-create-certificates-for-elasticsearch/353509/8 "2024-02-18T14:39:48Z")
@Yerbolat_Talasbekov Do not recreate the certificates they were probably correct... We just need to check a few things THEN If there is an issue you can recreate. You need to provide the CA to filebeat or use trusted fingerprint or use First got to the filebeat box and run `curl -k -v -u elastic https://elasticip:9200` Show the command and output Also please provide your full filebeat.yml in text .. format with 3 backticks ` before and after Read this as well as we will end up providing... > **[Install Elasticsearch with RPM | Elasticsearch Guide \[8.12\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html#_connect_clients_to_elasticsearch_4)** IF we need to regenerate the http cert we will after we check everything else ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 17, 2024, 2:40pm UTC](https://discuss.elastic.co/t/can-not-create-certificates-for-elasticsearch/353509/9 "2024-03-17T14:40:39Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.