# Configure Kibana with SSL for shield
**URL:** https://discuss.elastic.co/t/configure-kibana-with-ssl-for-shield/53613
**Category:** Kibana
**Created:** [June 22, 2016, 5:47am UTC](https://discuss.elastic.co/t/configure-kibana-with-ssl-for-shield/53613 "2016-06-22T05:47:38Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)
#### Post date: [June 22, 2016, 5:47am UTC](https://discuss.elastic.co/t/configure-kibana-with-ssl-for-shield/53613/1 "2016-06-22T05:47:38Z")
According to [https://www.elastic.co/guide/en/shield/current/kibana.html](https://www.elastic.co/guide/en/shield/current/kibana.html),
I need to set
```
server.ssl.key: /path/to/your/server.key
server.ssl.cert: /path/to/your/server.crt
```
Where could I find the path for the key and cert in `Windows Environment`?
---
### Author:  [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)
#### Post date: [June 22, 2016, 7:13am UTC](https://discuss.elastic.co/t/configure-kibana-with-ssl-for-shield/53613/2 "2016-06-22T07:13:46Z")
You need to generate your own self-signed certificate or request a certificate to a Trusted Authority. After this you will get the .key (the private key of the certificate) and .crt (the public part of the certificate)
To create a self signed certificate follow this link How to create a self-signed certificate with openssl?
You will need openssl
> openssl genrsa -des3 -out server.key 2048
> openssl rsa -in server.key -out server.key
> openssl req -sha256 -new -key server.key -out server.csr -subj '/CN=localhost'
> openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
> Replace 'localhost' with your domain name. Run commands one by one because openssl will prompt you same values for certificate generation
If you need a trusted certificate, request one to a trusted authority like [letsencrypt.org](http://letsencrypt.org)
---
### Author:  [@Khalah\_Jones\_Golden](https://discuss.elastic.co/u/Khalah_Jones_Golden)
#### Post date: [June 22, 2016, 4:45pm UTC](https://discuss.elastic.co/t/configure-kibana-with-ssl-for-shield/53613/3 "2016-06-22T16:45:50Z")
It depends on where you put your key and cert. You can put it anywhere you would like, so this is a bit difficult to answer.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:49pm UTC](https://discuss.elastic.co/t/configure-kibana-with-ssl-for-shield/53613/4 "2017-07-06T13:49:32Z")