# Configure SSL/TLS beats for Windows
**URL:** https://discuss.elastic.co/t/configure-ssl-tls-beats-for-windows/267346
**Category:** Beats
**Tags:** windows, metricbeat, heartbeat
**Created:** [March 16, 2021, 10:29am UTC](https://discuss.elastic.co/t/configure-ssl-tls-beats-for-windows/267346 "2021-03-16T10:29:25Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@ravenmx](https://discuss.elastic.co/u/ravenmx)
#### Post date: [March 16, 2021, 10:29am UTC](https://discuss.elastic.co/t/configure-ssl-tls-beats-for-windows/267346/1 "2021-03-16T10:29:25Z")
Hello. I can not configure metricbeat for Windows. It is required to configure ssl / tsl connection before logstash. but the agent does not accept system paths (C: \ path \ to \ beats \ sslCA.pem). therefore I can not specify either the root certificate or the client keys.
found nothing in the documentation on this topic.
when starting the agent, it either closes with an error or does not establish a connection to logstash. in the logs it gives out:
`x509: certificate signed by unknown authority`
imported root cert into certBox Windows but the situation hasn't changed
metricbeat.yml:
"
metricbeat.config.modules:
path: ${path.config}/modules.d/\*.yml
reload.enabled: false
output.logstash:
# The Logstash hosts
hosts: ["[logstash.example.net:9815](http://logstash.example.net:9815)"]
ssl.enabled: true
certificate\_authorities: "C:\ProgramData\Beats\metricbeat\sslclientCA.crt"
"
logstash.conf:
` input { beats { port => 9815 codec => "json_lines" ssl => true ssl_certificate_authorities => ["/etc/logstash/sslclientCA.pem"] ssl_certificate => "/etc/logstash/logstash.pem" ssl_key => "/etc/logstash/logstash.pkcs8.key" ssl_verify_mode => "none" }}`
---
### Author:  [@ravenmx](https://discuss.elastic.co/u/ravenmx)
#### Post date: [March 16, 2021, 11:45am UTC](https://discuss.elastic.co/t/configure-ssl-tls-beats-for-windows/267346/2 "2021-03-16T11:45:21Z")
found a solution for myself.
## Windows Beats:
## ... output.logstash: hosts: ["[logstash.example.net:9815](http://logstash.example.net:9815)"] ssl.enabled: true ssl.certificate\_authorities: C:\ProgramData\Beats\metricbeat\sslclientCA.crt ssl.certificate: C:\ProgramData\Beats\metricbeat\metricbeat.crt ssl.key: C:\ProgramData\Beats\metricbeat\metricbeat.key ...
it's all \ " ...
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 13, 2021, 1:45pm UTC](https://discuss.elastic.co/t/configure-ssl-tls-beats-for-windows/267346/3 "2021-04-13T13:45:43Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.