# Configuration of elastic search using organisation specific certificates

**URL:** <https://discuss.elastic.co/t/configuration-of-elastic-search-using-organisation-specific-certificates/267223>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [March 15, 2021, 6:36am UTC](https://discuss.elastic.co/t/configuration-of-elastic-search-using-organisation-specific-certificates/267223 "2021-03-15T06:36:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Srinivas1602](https://avatars.discourse-cdn.com/v4/letter/s/5f9b8f/32.png) [@Srinivas1602](https://discuss.elastic.co/u/Srinivas1602)\
**Post date:** [March 15, 2021, 6:36am UTC](https://discuss.elastic.co/t/configuration-of-elastic-search-using-organisation-specific-certificates/267223/1 "2021-03-15T06:36:38Z")

</div>

Hi.  
I have a 3 node cluster setup with 2 data nodes and 1 master node setup running with tls/ssl/https enabled with the help of Elasticsearch offical documentation.  
However I would like to use our internal organisation specific certificates (root ca certificate and sub ca certificate) and I am not having clarity on how to use these certificates in my Elasticsearch and kibana config.

My elasticsearch.yml have the following security on properties on each node. (excluding the node specific properties)

```auto

```

> xpack.security.enabled: true  
> xpack.security.transport.ssl.enabled: true  
> xpack.security.transport.ssl.verification\_mode: certificate  
> xpack.security.transport.ssl.keystore.path: /data/Elasticsearch/elasticsearch-7.11.2/config/certs/elastic-certificates.p12  
> xpack.security.transport.ssl.truststore.path: /data/Elasticsearch/elasticsearch-7.11.2/config/certs/elastic-certificates.p12

> xpack.security.http.ssl.enabled: true  
> xpack.security.http.ssl.keystore.path: /data/Elasticsearch/elasticsearch-7.11.2/config/certs/elastic-certificates.p12  
> xpack.security.http.ssl.truststore.path: /data/Elasticsearch/elasticsearch-7.11.2/config/certs/elastic-certificates.p12  
> xpack.security.http.ssl.client\_authentication: optional

```auto

```

I am not familiar with the security and certificate related concepts,. Went through the official documentation, but did not help much either. if anyone could help me out in this regard it would be great.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 12, 2021, 6:37am UTC](https://discuss.elastic.co/t/configuration-of-elastic-search-using-organisation-specific-certificates/267223/2 "2021-04-12T06:37:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.