# Configuring-tls-docker - permission denied

**URL:** <https://discuss.elastic.co/t/configuring-tls-docker-permission-denied/108779>\
**Category:** Elasticsearch\
**Created:** [November 22, 2017, 6:47pm UTC](https://discuss.elastic.co/t/configuring-tls-docker-permission-denied/108779 "2017-11-22T18:47:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![aram535](https://avatars.discourse-cdn.com/v4/letter/a/48db29/32.png) [@aram535](https://discuss.elastic.co/u/aram535)\
**Post date:** [November 22, 2017, 6:47pm UTC](https://discuss.elastic.co/t/configuring-tls-docker-permission-denied/108779/1 "2017-11-22T18:47:22Z")

</div>

Hi,

I'm following the instructions on [https://www.elastic.co/guide/en/elasticsearch/reference/6.0/configuring-tls-docker.html](https://www.elastic.co/guide/en/elasticsearch/reference/6.0/configuring-tls-docker.html)

docker-compose -f create-certs.yml up

results in:

```
Creating create_certs ... 
Creating create_certs ... done
Attaching to create_certs
create_certs | mkdir: cannot create directory 'config/x-pack/certificates/certs': Permission denied
create_certs | Exception in thread "main" java.nio.file.NoSuchFileException: /usr/share/elasticsearch/config/x-pack/certificates/certs/bundle.zip
create_certs | at sun.nio.fs.UnixException.translateToIOException(UnixException.java:86)
create_certs | at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102)
create_certs | at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107)
create_certs | at sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:214)
create_certs | at java.nio.file.spi.FileSystemProvider.newOutputStream(FileSystemProvider.java:434)
create_certs | at java.nio.file.Files.newOutputStream(Files.java:216)
create_certs | at org.elasticsearch.xpack.ssl.CertificateTool.fullyWriteFile(CertificateTool.java:431)
create_certs | at org.elasticsearch.xpack.ssl.CertificateTool.generateAndWriteSignedCertificates(CertificateTool.java:381)
create_certs | at org.elasticsearch.xpack.ssl.CertificateTool.execute(CertificateTool.java:187)
create_certs | at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:69)
create_certs | at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:134)
create_certs | at org.elasticsearch.cli.Command.main(Command.java:90)
create_certs | at org.elasticsearch.xpack.ssl.CertificateTool.main(CertificateTool.java:158)
create_certs | unzip: cannot find or open config/x-pack/certificates/certs/bundle.zip, config/x-pack/certificates/certs/bundle.zip.zip or config/x-pack/certificates/certs/bundle.zip.ZIP.
create_certs | chgrp: cannot access 'config/x-pack/certificates/certs': No such file or directory
create_certs exited with code 1
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 20, 2017, 6:47pm UTC](https://discuss.elastic.co/t/configuring-tls-docker-permission-denied/108779/2 "2017-12-20T18:47:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.