# Configured ELK Basic TLS Security
**URL:** https://discuss.elastic.co/t/configured-elk-basic-tls-security/308387
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [June 28, 2022, 6:23pm UTC](https://discuss.elastic.co/t/configured-elk-basic-tls-security/308387 "2022-06-28T18:23:11Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@ftayyab](https://discuss.elastic.co/u/ftayyab)
#### Post date: [June 28, 2022, 6:23pm UTC](https://discuss.elastic.co/t/configured-elk-basic-tls-security/308387/1 "2022-06-28T18:23:11Z")
Hi,
I have been able to follow the documentation and generate my own certificates and used them in Elasticsearch for Transport and HTTP security. Elasticsearch is up and running. I have also been able to establish connection from Kibana to the manually configured secure Elasticsearch. However when I am trying to run
```auto
elasticsearch-create-enrollment-token -s kibana
```
I am getting:
ERROR: Unable to create an enrollment token. Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificate
The reason I wanted to configure the security and generate new certificates is because the default auto configuration stops working when elasticsearch is restarted a day later or so.
Any idea how I can sort out the error with the enrollment token
Thanks
---
### Author:  [@Justin\_Cranford](https://discuss.elastic.co/u/Justin_Cranford)
#### Post date: [June 29, 2022, 2:05pm UTC](https://discuss.elastic.co/t/configured-elk-basic-tls-security/308387/2 "2022-06-29T14:05:24Z")
Hello. Would you be able to give details about how or why `the default auto configuration stops working when elasticsearch is restarted a day later or so`? Is it possible the hostname is changing? Thank you.
---
### Author:  [@ftayyab](https://discuss.elastic.co/u/ftayyab)
#### Post date: [June 29, 2022, 2:34pm UTC](https://discuss.elastic.co/t/configured-elk-basic-tls-security/308387/3 "2022-06-29T14:34:06Z")
It was IP address changing issue. (if I stick with the auto configuration done by ES)
However I would still like to know why on configuring security manually (by following the TLS and HTTP security documentation) results in:
Unable to create an enrollment token. **Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificate**
Thanks
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 27, 2022, 2:34pm UTC](https://discuss.elastic.co/t/configured-elk-basic-tls-security/308387/4 "2022-07-27T14:34:42Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.