# Configurate ElasticSearch and Kibana with a differente certificate CA

**URL:** <https://discuss.elastic.co/t/configurate-elasticsearch-and-kibana-with-a-differente-certificate-ca/325295>\
**Category:** Kibana\
**Tags:** docker\
**Created:** [February 10, 2023, 8:48pm UTC](https://discuss.elastic.co/t/configurate-elasticsearch-and-kibana-with-a-differente-certificate-ca/325295 "2023-02-10T20:48:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Urbina](https://avatars.discourse-cdn.com/v4/letter/u/b19c9b/32.png) [@Urbina](https://discuss.elastic.co/u/Urbina)\
**Post date:** [February 10, 2023, 8:48pm UTC](https://discuss.elastic.co/t/configurate-elasticsearch-and-kibana-with-a-differente-certificate-ca/325295/1 "2023-02-10T20:48:10Z")

</div>

Hello everyone, I installed elasticksearch and kibana version 8.61 in docker, but I need to cahnge the certificate ca by a differente certificate, can you help me with the steps to take?

---

<div class="post-metadata">

**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Post date:** [February 10, 2023, 9:50pm UTC](https://discuss.elastic.co/t/configurate-elasticsearch-and-kibana-with-a-differente-certificate-ca/325295/2 "2023-02-10T21:50:08Z")

</div>

This is unclear; do you want Kibana https to be a different cert? While it's probably not documented, the best way to put Kibana behind https is to proxy it via Apache or NGINX. If you do that, then have Kibana listen only on localhost or have very good firewall rules.

---

<div class="post-metadata">

**Author:** ![Urbina](https://avatars.discourse-cdn.com/v4/letter/u/b19c9b/32.png) [@Urbina](https://discuss.elastic.co/u/Urbina)\
**Post date:** [February 10, 2023, 10:05pm UTC](https://discuss.elastic.co/t/configurate-elasticsearch-and-kibana-with-a-differente-certificate-ca/325295/3 "2023-02-10T22:05:47Z")

</div>

When you install elastic by default, it is left with a certificate from your own CA, I need to change that certificate to one from the my organization.

---

<div class="post-metadata">

**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Post date:** [February 10, 2023, 10:33pm UTC](https://discuss.elastic.co/t/configurate-elasticsearch-and-kibana-with-a-differente-certificate-ca/325295/4 "2023-02-10T22:33:19Z")

</div>

It's in the doc: [Update security certificates with a different CA | Elasticsearch Guide [master] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/master/update-node-certs-different.html)

Edited to fix link

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 10, 2023, 10:34pm UTC](https://discuss.elastic.co/t/configurate-elasticsearch-and-kibana-with-a-differente-certificate-ca/325295/5 "2023-03-10T22:34:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.