# Certificate pinning in Elasticsearch
**URL:** https://discuss.elastic.co/t/certificate-pinning-in-elasticsearch/350214
**Category:** Elasticsearch
**Created:** [January 2, 2024, 9:18am UTC](https://discuss.elastic.co/t/certificate-pinning-in-elasticsearch/350214 "2024-01-02T09:18:53Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@jaykb77](https://discuss.elastic.co/u/jaykb77)
#### Post date: [January 2, 2024, 9:18am UTC](https://discuss.elastic.co/t/certificate-pinning-in-elasticsearch/350214/1 "2024-01-02T09:18:53Z")
Hi,
We are using Elasticsearch 7.17.0 and using azure storage blobs for snapshots. We recently received a general notification from azure about certificate pinning.
> **[Certificate pinning - Certificate pinning and Azure services](https://learn.microsoft.com/en-us/azure/security/fundamentals/certificate-pinning#certificate-pinning-limitations)**
>
> Information about the history, usage, and risks of certificate pinning.
I believe we do not have any such configuration that enables cert pinning on our end but wanted to clarify. Are there such option or feature in Elasticsearch that enables certificate pinning?
---
### Author:  [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)
#### Post date: [January 2, 2024, 9:55am UTC](https://discuss.elastic.co/t/certificate-pinning-in-elasticsearch/350214/2 "2024-01-02T09:55:54Z")
Elasticsearch itself has no feature related to certificate pinning, but the JDK specifies the root CA certificates that it trusts and you need to keep that list up to date. The simplest way to do that is to keep ES up to date - 7.17.0 is 2 years old now, an upgrade to the latest version would be wise.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 30, 2024, 9:56am UTC](https://discuss.elastic.co/t/certificate-pinning-in-elasticsearch/350214/3 "2024-01-30T09:56:11Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.