# Catch 22 with creating passwords

**URL:** <https://discuss.elastic.co/t/catch-22-with-creating-passwords/268416>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [March 25, 2021, 9:50pm UTC](https://discuss.elastic.co/t/catch-22-with-creating-passwords/268416 "2021-03-25T21:50:37Z")\
**Posts on this page:** 4\
**Page:** 2

<div class="post-metadata">

**Author:** ![ricwhitney](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ricwhitney/32/43043_2.png) [@ricwhitney](https://discuss.elastic.co/u/ricwhitney)\
**Post date:** [April 1, 2021, 8:23pm UTC](https://discuss.elastic.co/t/catch-22-with-creating-passwords/268416/22 "2021-04-01T20:23:41Z")

</div>

I am ready to install the certs - I have them at /opt/cert/ - can I use these non-self-signed certs?  
@stephenb I am trying to follow your guide but do not know how to use the real certs.  
Thanks for any help you can provide

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [April 1, 2021, 8:30pm UTC](https://discuss.elastic.co/t/catch-22-with-creating-passwords/268416/23 "2021-04-01T20:30:40Z")

</div>

Hi @ricwhitney

Yes you should be able to use the non-self signed.

Its about putting the right cert parts in the right places with the correct elasticsearch yml config.

BTW I am not a certs internal expert ... I know how to generate certs and where to put them, but I probably can not help you a lot if the certs you generated are not valid.

---

<div class="post-metadata">

**Author:** ![ricwhitney](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ricwhitney/32/43043_2.png) [@ricwhitney](https://discuss.elastic.co/u/ricwhitney)\
**Post date:** [April 6, 2021, 12:34am UTC](https://discuss.elastic.co/t/catch-22-with-creating-passwords/268416/24 "2021-04-06T00:34:44Z")

</div>

after much trial and error, I have finally got my elasticsearch and kibana working.  
Here is the relevant entries in elasticsearch.yml:

```auto
    xpack.security.enabled: true
    xpack.security.http.ssl.enabled: true
    xpack.security.transport.ssl.enabled: true
    xpack.security.http.ssl.key: cert/domain.key
    xpack.security.http.ssl.certificate: cert/ca_bundle.pem
    xpack.security.http.ssl.certificate_authorities: cert/ca_bundle.pem
    xpack.security.transport.ssl.key: cert/domain.key
    xpack.security.transport.ssl.certificate: cert/ca_bundle.pem
    xpack.security.transport.ssl.certificate_authorities: cert/ca_bundle.pem

```

and here is the relevant stuff in kibana.yml:

```auto
    elasticsearch.username: "elastic"
    elasticsearch.password: "elastic password"

    server.ssl.enabled: true
    server.ssl.certificate: /etc/ssl/certs/chained.pem
    server.ssl.key: /etc/ssl/certs/domain.key

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 4, 2021, 12:35am UTC](https://discuss.elastic.co/t/catch-22-with-creating-passwords/268416/25 "2021-05-04T00:35:19Z")

</div>

Closed on May 4, 2021, 12:35am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/catch-22-with-creating-passwords/268416.md?page=1)