# Configuring TLS and authentication in Local

**URL:** <https://discuss.elastic.co/t/configuring-tls-and-authentication-in-local/222235>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [March 5, 2020, 8:35am UTC](https://discuss.elastic.co/t/configuring-tls-and-authentication-in-local/222235 "2020-03-05T08:35:35Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sarvendras](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sarvendras/32/46287_2.png) [@sarvendras](https://discuss.elastic.co/u/sarvendras)\
**Post date:** [March 5, 2020, 8:35am UTC](https://discuss.elastic.co/t/configuring-tls-and-authentication-in-local/222235/1 "2020-03-05T08:35:35Z")

</div>

Hi All,  
I am following below blog for TLS configutation on my local windows machine.

> **[Secure Elasticsearch with TLS encryption and role-based access control](https://www.elastic.co/blog/getting-started-with-elasticsearch-security)**
>
> Secure your Elasticsearch clusters -- and the other components of the Elastic Stack -- with node-to-node TLS and role-based access control (RBAC). These features and more are now available free with the default distribution of Elasticsearch and...

  
After completing and following till step 3 when I am running second elasticsearch node its giving below error.While first master node is running fine.

Please suggest what to do.

Caused by: java.lang.IllegalArgumentException: can't add node {RENLTP2N022}{7a-f3ebMRn6qVx0b7DXo2A}{g9QImwYeTBm8umV9QQx6ag}{127.0.0.1}{127.0.0.1:9301}{di}{ml.machine\_memory=17080250368, ml.max\_open\_jobs=20, xpack.installed=true}, found existing node {RENLTP2N022}{7a-f3ebMRn6qVx0b7DXo2A}{ZaYmlK-5TfCSPG6RNYyQbw}{127.0.0.1}{127.0.0.1:9300}{dim}{ml.machine\_memory=17080250368, xpack.installed=true, ml.max\_open\_jobs=20} with the same id but is a different node instance  
at org.elasticsearch.cluster.node.DiscoveryNodes$Builder.add(DiscoveryNodes.java:618) ~[elasticsearch-7.3.2.jar:7.3.2]

---

<div class="post-metadata">

**Author:** ![Wolfram\_Haussig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wolfram_haussig/32/70528_2.png) [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Post date:** [March 5, 2020, 9:04am UTC](https://discuss.elastic.co/t/configuring-tls-and-authentication-in-local/222235/2 "2020-03-05T09:04:26Z")

</div>

Hi,

As far as I know, the ElasticSearch Node ID is generated at the first start of the instance and persisted in the data directory of ElasticSearch.

What Operating System are you on and how did you install it(downloaded the zip-file)? My guess is that you copied the ElasticSearch installation containing the data directory with the node id into a new location for the second node. As the node found the node id in the data directory it did not create a new one =\> id conflict.

Best regards  
Wolfram

---

<div class="post-metadata">

**Author:** ![sarvendras](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sarvendras/32/46287_2.png) [@sarvendras](https://discuss.elastic.co/u/sarvendras)\
**Post date:** [March 6, 2020, 5:02am UTC](https://discuss.elastic.co/t/configuring-tls-and-authentication-in-local/222235/3 "2020-03-06T05:02:58Z")

</div>

Thanks @Wolfram_Haussig  
Yes i am working on windows machine..and i copied entire config folder thats why issue was there..now after copying certain files only(not complete folder) issue is resolved..  
Both ES nodes are running at 9200 and 9201 ports.Is this the way to test that TLS is enabled or there is any other way?

Also please suggest what are the steps(documentation) to configure TLS on Cloud using Helm.I did not got any straight forward link

Thanks  
Sarvendra

---

<div class="post-metadata">

**Author:** ![Wolfram\_Haussig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wolfram_haussig/32/70528_2.png) [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Post date:** [March 6, 2020, 7:12am UTC](https://discuss.elastic.co/t/configuring-tls-and-authentication-in-local/222235/4 "2020-03-06T07:12:52Z")

</div>

Hi,

I think there is nothing wrong with the way you want to check TLS. Regarding TLS on Cloud: I have no experience with Cloud in general and Helm in particular but I am sure there are others here that can help you.

Best regards  
Wolfram

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 3, 2020, 7:12am UTC](https://discuss.elastic.co/t/configuring-tls-and-authentication-in-local/222235/5 "2020-04-03T07:12:55Z")

</div>

Closed on April 3, 2020, 7:12am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.