# Certificate error occurred when installing the fleet server

**URL:** <https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710>\
**Category:** Beats\
**Tags:** fleet\
**Created:** [December 21, 2022, 2:29am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710 "2022-12-21T02:29:47Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 22, 2022, 2:53am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/21 "2022-12-22T02:53:39Z")

</div>

I can use ` curl --cacert /www/server/elastic/es1/config/certs/elasticsearch-ca.crt -u elastic https://192.168.2.188:9200` this command to connect

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/6/b633bf6ae8435786fd8f9a9739f2f4ff511a857b.png)  
Use the `curl -v --cacert /www/server/elastic-agent/certs/elasticsearch-ca.crt https://192.168.2.188:9200` this command without identity credentials  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/3/7/373295155cf28a27c29e59307ba520d52669f514.png)

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 22, 2022, 3:18am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/22 "2022-12-22T03:18:57Z")

</div>

There is no certificate error now, but I have been waiting for the installation of the fleet server

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/e/2ea901140e2d75182eff7293755befd6cae06ebc.png)

---

<div class="post-metadata">

**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\
**Post date:** [December 22, 2022, 3:56am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/23 "2022-12-22T03:56:33Z")

</div>

Is there any log file? If yes, can you share the content of the Elastic Agent log?

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 22, 2022, 6:02am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/24 "2022-12-22T06:02:19Z")

</div>

If there is no log information, you have to wait all the time. After waiting, an error occurs. You cannot install the fleet server, like this

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/6/b6694dd1b350feeed9ba86ab611784ade41453ee.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/0/e07c4c506a9ada91c7e994a05474aeb3aedafee0.png)

I put elasticsearch-ca.crt in the directory`/usr/local/share/ca-certificates`, so there is no certificate error, but the fleet server has never been installed  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/7/a7b17cbb24dc9f51a434a06000184d00abe8f063.png)

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 22, 2022, 6:14am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/25 "2022-12-22T06:14:04Z")

</div>

If I delete the certificate in the`/usr/local/share/ca-certificates` directory, a certificate error will occur

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/a/6ae5fe463407692115effe66676c5957ce0738e2.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/0/00562a37a673544687a122100e05d66d20dd35cb.png)

---

<div class="post-metadata">

**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\
**Post date:** [December 22, 2022, 7:00am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/26 "2022-12-22T07:00:56Z")

</div>

I think we have established that the certificate is correct. The Fleet Server seems to not able to retrieve the Fleet server policy from Elasticsearch. Can you also share the agent policy?

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 22, 2022, 7:08am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/27 "2022-12-22T07:08:53Z")

</div>

id: 1d940ef0-8107-11ed-b9f0-c1afc5e7029d  
revision: 3  
outputs:  
default:  
type: elasticsearch  
hosts:  
- '[https://192.168.2.188:9200](https://192.168.2.188:9200)'  
ssl.ca\_trusted\_fingerprint: 41bb4495d245ad44c715f1ce58d144ab07e4036940f3eaded1f8ffc3ba2c7907  
output\_permissions:  
default:  
\_elastic\_agent\_monitoring:  
indices:  
- names:  
- logs-elastic\_agent.apm\_server-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.apm\_server-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.auditbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.auditbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.cloudbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.elastic\_agent-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.cloudbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.endpoint\_security-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.endpoint\_security-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.filebeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.filebeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.osquerybeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.packetbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.metricbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.fleet\_server-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.osquerybeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.heartbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.fleet\_server-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.metricbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.heartbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.packetbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
\_elastic\_agent\_checks:  
cluster:  
- monitor  
529ce2d7-d074-4348-b64d-ed7cc84ed84f:  
indices:  
- names:  
- logs-system.syslog-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-system.auth-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-system.application-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-system.security-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-system.system-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.fsstat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.cpu-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.uptime-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.filesystem-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.process-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.load-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.diskio-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.process.summary-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.memory-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.network-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.socket\_summary-default  
privileges:  
- auto\_configure  
- create\_doc  
agent:  
download:  
source\_uri: '[https://artifacts.elastic.co/downloads/](https://artifacts.elastic.co/downloads/)'  
monitoring:  
enabled: true  
use\_output: default  
namespace: default  
logs: true  
metrics: true  
inputs:

- id: logfile-system-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
name: system-2  
revision: 1  
type: logfile  
use\_output: default  
meta:  
package:  
name: system  
version: 1.20.4  
data\_stream:  
namespace: default  
package\_policy\_id: 529ce2d7-d074-4348-b64d-ed7cc84ed84f  
streams:
  - id: logfile-system.syslog-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.syslog  
type: logs  
paths:
    - /var/log/messages\*
    - /var/log/syslog\*  
exclude\_files:
    - .gz$  
multiline:  
pattern: ^\s  
match: after  
processors:
    - add\_locale: null  
ignore\_older: 72h

  - id: logfile-system.auth-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.auth  
type: logs  
ignore\_older: 72h  
paths:
    - /var/log/auth.log\*
    - /var/log/secure\*  
exclude\_files:
    - .gz$  
multiline:  
pattern: ^\s  
match: after  
tags:
    - system-auth  
processors:
    - add\_locale: null

- id: winlog-system-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
name: system-2  
revision: 1  
type: winlog  
use\_output: default  
meta:  
package:  
name: system  
version: 1.20.4  
data\_stream:  
namespace: default  
package\_policy\_id: 529ce2d7-d074-4348-b64d-ed7cc84ed84f  
streams:
  - id: winlog-system.application-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
name: Application  
data\_stream:  
dataset: system.application  
type: logs  
condition: '${host.platform} == ''windows'''  
ignore\_older: 72h
  - id: winlog-system.security-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
name: Security  
data\_stream:  
dataset: system.security  
type: logs  
condition: '${host.platform} == ''windows'''  
ignore\_older: 72h
  - id: winlog-system.system-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
name: System  
data\_stream:  
dataset: system.system  
type: logs  
condition: '${host.platform} == ''windows'''  
ignore\_older: 72h

- id: system/metrics-system-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
name: system-2  
revision: 1  
type: system/metrics  
use\_output: default  
meta:  
package:  
name: system  
version: 1.20.4  
data\_stream:  
namespace: default  
package\_policy\_id: 529ce2d7-d074-4348-b64d-ed7cc84ed84f  
streams:
  - id: system/metrics-system.fsstat-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.fsstat  
type: metrics  
metricsets:
    - fsstat  
period: 1m  
processors:
    - drop\_event.when.regexp:  
system.fsstat.mount\_point: ^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)

  - id: system/metrics-system.cpu-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.cpu  
type: metrics  
metricsets:
    - cpu  
cpu.metrics:
    - percentages
    - normalized\_percentages  
period: 10s

  - id: system/metrics-system.uptime-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.uptime  
type: metrics  
metricsets:
    - uptime  
period: 10s

  - id: system/metrics-system.filesystem-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.filesystem  
type: metrics  
metricsets:
    - filesystem  
period: 1m  
processors:
    - drop\_event.when.regexp:  
system.filesystem.mount\_point: ^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)

  - id: system/metrics-system.process-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.process  
type: metrics  
metricsets:
    - process  
period: 10s  
process.include\_top\_n.by\_cpu: 5  
process.include\_top\_n.by\_memory: 5  
process.cmdline.cache.enabled: true  
process.cgroups.enabled: false  
process.include\_cpu\_ticks: false  
processes:
    - .\*

  - id: system/metrics-system.load-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.load  
type: metrics  
metricsets:
    - load  
condition: '${host.platform} != ''windows'''  
period: 10s

  - id: system/metrics-system.diskio-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.diskio  
type: metrics  
metricsets:
    - diskio  
diskio.include\_devices: null  
period: 10s

  - id: \>-  
system/metrics-system.process.summary-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.process.summary  
type: metrics  
metricsets:
    - process\_summary  
period: 10s

  - id: system/metrics-system.memory-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.memory  
type: metrics  
metricsets:
    - memory  
period: 10s

  - id: system/metrics-system.network-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.network  
type: metrics  
metricsets:
    - network  
period: 10s  
network.interfaces: null

  - id: \>-  
system/metrics-system.socket\_summary-529ce2d7-d074-4348-b64d-ed7cc84ed84f  
data\_stream:  
dataset: system.socket\_summary  
type: metrics  
metricsets:
    - socket\_summary  
period: 10s  
fleet:  
hosts:

  - '[https://192.168.2.188:8220](https://192.168.2.188:8220)'

---

<div class="post-metadata">

**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\
**Post date:** [December 22, 2022, 7:17am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/28 "2022-12-22T07:17:27Z")

</div>

This policy doesn't have `fleet-server` integration. You need to add the Fleet Server integration to this policy in order to use this policy for the Fleet Server.

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 22, 2022, 7:19am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/29 "2022-12-22T07:19:00Z")

</div>

id: fleet-server-policy  
revision: 5  
outputs:  
default:  
type: elasticsearch  
hosts:  
- '[https://192.168.2.188:9200](https://192.168.2.188:9200)'  
ssl.ca\_trusted\_fingerprint: 41bb4495d245ad44c715f1ce58d144ab07e4036940f3eaded1f8ffc3ba2c7907  
output\_permissions:  
default:  
\_elastic\_agent\_monitoring:  
indices:  
- names:  
- logs-elastic\_agent.apm\_server-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.apm\_server-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.auditbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.auditbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.cloudbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.cloudbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.elastic\_agent-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.endpoint\_security-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.endpoint\_security-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.filebeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.filebeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.fleet\_server-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.fleet\_server-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.heartbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.heartbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.metricbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.metricbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.osquerybeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.osquerybeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-elastic\_agent.packetbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-elastic\_agent.packetbeat-default  
privileges:  
- auto\_configure  
- create\_doc  
\_elastic\_agent\_checks:  
cluster:  
- monitor  
92f21c6e-3af8-479d-930d-a815538d375b:  
indices:  
- names:  
- logs-system.auth-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-system.syslog-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-system.application-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-system.security-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- logs-system.system-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.cpu-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.diskio-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.filesystem-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.fsstat-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.load-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.memory-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.network-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.process-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.process.summary-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.socket\_summary-default  
privileges:  
- auto\_configure  
- create\_doc  
- names:  
- metrics-system.uptime-default  
privileges:  
- auto\_configure  
- create\_doc  
agent:  
download:  
source\_uri: '[https://artifacts.elastic.co/downloads/](https://artifacts.elastic.co/downloads/)'  
monitoring:  
enabled: true  
use\_output: default  
namespace: default  
logs: true  
metrics: true  
inputs:

- id: logfile-system-92f21c6e-3af8-479d-930d-a815538d375b  
name: system-1  
revision: 1  
type: logfile  
use\_output: default  
meta:  
package:  
name: system  
version: 1.20.4  
data\_stream:  
namespace: default  
package\_policy\_id: 92f21c6e-3af8-479d-930d-a815538d375b  
streams:
  - id: logfile-system.auth-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.auth  
type: logs  
ignore\_older: 72h  
paths:
    - /var/log/auth.log\*
    - /var/log/secure\*  
exclude\_files:
    - .gz$  
multiline:  
pattern: ^\s  
match: after  
tags:
    - system-auth  
processors:
    - add\_locale: null

  - id: logfile-system.syslog-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.syslog  
type: logs  
paths:
    - /var/log/messages\*
    - /var/log/syslog\*  
exclude\_files:
    - .gz$  
multiline:  
pattern: ^\s  
match: after  
processors:
    - add\_locale: null  
ignore\_older: 72h

- id: winlog-system-92f21c6e-3af8-479d-930d-a815538d375b  
name: system-1  
revision: 1  
type: winlog  
use\_output: default  
meta:  
package:  
name: system  
version: 1.20.4  
data\_stream:  
namespace: default  
package\_policy\_id: 92f21c6e-3af8-479d-930d-a815538d375b  
streams:
  - id: winlog-system.application-92f21c6e-3af8-479d-930d-a815538d375b  
name: Application  
data\_stream:  
dataset: system.application  
type: logs  
condition: '${host.platform} == ''windows'''  
ignore\_older: 72h
  - id: winlog-system.security-92f21c6e-3af8-479d-930d-a815538d375b  
name: Security  
data\_stream:  
dataset: system.security  
type: logs  
condition: '${host.platform} == ''windows'''  
ignore\_older: 72h
  - id: winlog-system.system-92f21c6e-3af8-479d-930d-a815538d375b  
name: System  
data\_stream:  
dataset: system.system  
type: logs  
condition: '${host.platform} == ''windows'''  
ignore\_older: 72h

- id: system/metrics-system-92f21c6e-3af8-479d-930d-a815538d375b  
name: system-1  
revision: 1  
type: system/metrics  
use\_output: default  
meta:  
package:  
name: system  
version: 1.20.4  
data\_stream:  
namespace: default  
package\_policy\_id: 92f21c6e-3af8-479d-930d-a815538d375b  
streams:
  - id: system/metrics-system.cpu-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.cpu  
type: metrics  
metricsets:
    - cpu  
cpu.metrics:
    - percentages
    - normalized\_percentages  
period: 10s

  - id: system/metrics-system.diskio-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.diskio  
type: metrics  
metricsets:
    - diskio  
diskio.include\_devices: null  
period: 10s

  - id: system/metrics-system.filesystem-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.filesystem  
type: metrics  
metricsets:
    - filesystem  
period: 1m  
processors:
    - drop\_event.when.regexp:  
system.filesystem.mount\_point: ^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)

  - id: system/metrics-system.fsstat-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.fsstat  
type: metrics  
metricsets:
    - fsstat  
period: 1m  
processors:
    - drop\_event.when.regexp:  
system.fsstat.mount\_point: ^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)

  - id: system/metrics-system.load-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.load  
type: metrics  
metricsets:
    - load  
condition: '${host.platform} != ''windows'''  
period: 10s

  - id: system/metrics-system.memory-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.memory  
type: metrics  
metricsets:
    - memory  
period: 10s

  - id: system/metrics-system.network-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.network  
type: metrics  
metricsets:
    - network  
period: 10s  
network.interfaces: null

  - id: system/metrics-system.process-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.process  
type: metrics  
metricsets:
    - process  
period: 10s  
process.include\_top\_n.by\_cpu: 5  
process.include\_top\_n.by\_memory: 5  
process.cmdline.cache.enabled: true  
process.cgroups.enabled: false  
process.include\_cpu\_ticks: false  
processes:
    - .\*

  - id: \>-  
system/metrics-system.process.summary-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.process.summary  
type: metrics  
metricsets:
    - process\_summary  
period: 10s

  - id: \>-  
system/metrics-system.socket\_summary-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.socket\_summary  
type: metrics  
metricsets:
    - socket\_summary  
period: 10s

  - id: system/metrics-system.uptime-92f21c6e-3af8-479d-930d-a815538d375b  
data\_stream:  
dataset: system.uptime  
type: metrics  
metricsets:
    - uptime  
period: 10s

- id: fleet-server-fleet\_server-229c764a-a441-4341-80d0-bfcb1099173b  
name: fleet\_server-1  
revision: 3  
type: fleet-server  
use\_output: default  
meta:  
package:  
name: fleet\_server  
version: 1.2.0  
data\_stream:  
namespace: default  
package\_policy\_id: 229c764a-a441-4341-80d0-bfcb1099173b  
server:  
port: 8220  
host: 0.0.0.0  
fleet:  
hosts:
  - '[https://192.168.2.188:8220](https://192.168.2.188:8220)'

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 22, 2022, 7:33am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/30 "2022-12-22T07:33:51Z")

</div>

Is there a fleet server integration,This is what I just sent

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/e/0e9aa0d0627c437555faca857e4e985ae980b05a.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/f/efd9cdb3bfd6f37e464158587e7cbcf542718c97.png)

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 22, 2022, 7:35am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/31 "2022-12-22T07:35:41Z")

</div>

But I still can't use this installation

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/6/c6f825173b5267fcb88578b25809518d4d71ad63.png)

---

<div class="post-metadata">

**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\
**Post date:** [December 22, 2022, 7:41am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/32 "2022-12-22T07:41:25Z")

</div>

Yes, your second policy contains Fleet Server integration, which looks correct.

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 22, 2022, 8:42am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/33 "2022-12-22T08:42:22Z")

</div>

I can use this, but there is no data

```auto
 sudo ./elastic-agent/elastic-agent install -f --url=https://192.168.2.188:8220 --fleet-server-es=https://192.168.2.188:9200 --fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL3Rva2VuLTE2NzE2OTgzNTI2NjM6cDZseURVWlFRSHVOZTY5bDloTERwQQ --fleet-server-es-ca=/www/server/elastic-agent/certs/elasticsearch-ca.crt --certificate-authorities=/www/server/elastic-agent/certs/ca.crt --fleet-server-cert=/www/server/elastic-agent/certs/fleet-server.crt --fleet-server-cert-key=/www/server/elastic-agent/certs/fleet-server.key

```

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 22, 2022, 8:49am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/34 "2022-12-22T08:49:55Z")

</div>

When I query the data, the elasticsearch encounters an error

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/a/7a59d46bb2ab8b61b063548c3f1c5357f0bfd1a9.png)

---

<div class="post-metadata">

**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\
**Post date:** [December 22, 2022, 9:05am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/35 "2022-12-22T09:05:35Z")

</div>

Can you try to remove `ssl.ca_trusted_fingerprint` and add `ssl.verification_mode: none` in your Elasticsearch output configuration? See if that works.

I noticed you were using a different service token to enroll the Fleet Server this time, which worked, so as suspected, the service token was incorrect.

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 23, 2022, 1:15am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/36 "2022-12-23T01:15:16Z")

</div>

This parameter does not work. My elasticsearch version is 8.5.0

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/4/b454e403182b81bbc8d35f7f947b6d4df6b45f0d.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/5/d56cb29b433686eb4f8abf2dc81e72e35332b359.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/8/08b71ee581709dd38a4f8f075d37063aa2d72074.png)

---

<div class="post-metadata">

**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\
**Post date:** [December 23, 2022, 1:43am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/37 "2022-12-23T01:43:54Z")

</div>

I meant to add that `ssl.verification_mode: none` into the Elasticsearch output configuration in Fleet, not in `elasticsearch.yml` file.

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 23, 2022, 2:09am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/38 "2022-12-23T02:09:55Z")

</div>

In which file，is it in here

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/e/5ea82e4be6aab2df0bfb8be02bd6dcc79de96873.png)

---

<div class="post-metadata">

**Author:** ![hendry.lim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendry.lim/32/71328_2.png) [@hendry.lim](https://discuss.elastic.co/u/hendry.lim)\
**Post date:** [December 23, 2022, 2:17am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/39 "2022-12-23T02:17:18Z")

</div>

Go to Kibana, Fleet \> Settings \> Elasticsearch output settings. There is a box where you can enter YAML configs.

---

<div class="post-metadata">

**Author:** ![lovelike123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lovelike123/32/114986_2.png) [@lovelike123](https://discuss.elastic.co/u/lovelike123)\
**Post date:** [December 23, 2022, 2:32am UTC](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710/40 "2022-12-23T02:32:12Z")

</div>

The first one cannot be changed. I added one, but there was an error

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/9/e9b22766e73fe5bad3b3f9d020bd40269af9e0e7.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/9/794b63acef6086861ee0d8f820ea615282f5098c.png)

[Previous page](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710.md?page=1)

[Next page](https://discuss.elastic.co/t/certificate-error-occurred-when-installing-the-fleet-server/321710.md?page=3)