# Conf Kibana and shield
**URL:** https://discuss.elastic.co/t/conf-kibana-and-shield/66009
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [November 14, 2016, 4:16pm UTC](https://discuss.elastic.co/t/conf-kibana-and-shield/66009 "2016-11-14T16:16:40Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@Gnosis](https://discuss.elastic.co/u/Gnosis)
#### Post date: [November 14, 2016, 4:16pm UTC](https://discuss.elastic.co/t/conf-kibana-and-shield/66009/1 "2016-11-14T16:16:40Z")
Hi all,
I've followed all the action to use SSl with Elastic and Kibana but it doesn't work.
I've generated keystore, certificat and key (first time for me) but when i must filled the kibana conf i don't understand what i have to put for the options :
> server.ssl.key: /path/to/your/server.key
> server.ssl.cert: /path/to/your/server.crt
> elasticsearch.ssl.ca: /path/to/your/cacert.pem
Someone could explain me ?
I don't put all the actions i made because it will be a paste of the documentation.
However first i made a CA --\> [https://www.elastic.co/guide/en/shield/2.3/certificate-authority.html](https://www.elastic.co/guide/en/shield/2.3/certificate-authority.html)
then i follow that -\> [https://www.elastic.co/guide/en/shield/2.3/ssl-tls.html#installing-node-certificates](https://www.elastic.co/guide/en/shield/2.3/ssl-tls.html#installing-node-certificates)
and finally that --\> [https://www.elastic.co/guide/en/shield/2.3/kibana.html](https://www.elastic.co/guide/en/shield/2.3/kibana.html)
Thx all
---
### Author:  [@ppisljar](https://discuss.elastic.co/u/ppisljar)
#### Post date: [November 16, 2016, 1:37pm UTC](https://discuss.elastic.co/t/conf-kibana-and-shield/66009/2 "2016-11-16T13:37:06Z")
First sorry for late reply. Just to confirm, you are using elastic serach 2.3 ?
---
### Author:  [@Gnosis](https://discuss.elastic.co/u/Gnosis)
#### Post date: [November 16, 2016, 1:52pm UTC](https://discuss.elastic.co/t/conf-kibana-and-shield/66009/3 "2016-11-16T13:52:49Z")
Don't worry thx for your reply, and yes i use 2.3 version
---
### Author:  [@ppisljar](https://discuss.elastic.co/u/ppisljar)
#### Post date: [November 16, 2016, 7:08pm UTC](https://discuss.elastic.co/t/conf-kibana-and-shield/66009/4 "2016-11-16T19:08:58Z")
[elasticsearch.ssl.ca](http://elasticsearch.ssl.ca) needs to point to your cacert.pem file you generated in the first step. this is used to encrypt communication between kibana server and elastic search.
server.ssl.key and .cert are different certs that you use to encrypt kibana server - browser communication.
---
### Author:  [@Gnosis](https://discuss.elastic.co/u/Gnosis)
#### Post date: [November 17, 2016, 9:01am UTC](https://discuss.elastic.co/t/conf-kibana-and-shield/66009/5 "2016-11-17T09:01:44Z")
Ok, thx.
So in short, what link (of my initial message) do i have to use for each option plz ?
I'm really sorry but i think i lack information on SSL
---
### Author:  [@ppisljar](https://discuss.elastic.co/u/ppisljar)
#### Post date: [November 17, 2016, 11:31am UTC](https://discuss.elastic.co/t/conf-kibana-and-shield/66009/6 "2016-11-17T11:31:20Z")
first link for [elasticsearch.ssl.ca](http://elasticsearch.ssl.ca)
for server.ssl.key and .cert check out [this post](https://discuss.elastic.co/t/configure-kibana-with-ssl-for-shield/53613)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 15, 2016, 11:31am UTC](https://discuss.elastic.co/t/conf-kibana-and-shield/66009/7 "2016-12-15T11:31:35Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.