# Doubts for SSL certs renew on ELK stack v8
**URL:** https://discuss.elastic.co/t/doubts-for-ssl-certs-renew-on-elk-stack-v8/300959
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [March 29, 2022, 12:10pm UTC](https://discuss.elastic.co/t/doubts-for-ssl-certs-renew-on-elk-stack-v8/300959 "2022-03-29T12:10:01Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)
#### Post date: [March 29, 2022, 12:10pm UTC](https://discuss.elastic.co/t/doubts-for-ssl-certs-renew-on-elk-stack-v8/300959/1 "2022-03-29T12:10:01Z")
i have an ELK stack version 8 environment and i use the default security configuration for Elasticsearch, with the default certificates (http\_ca.crt, http.p12, transport.p12), at the moment the environment works fine with these certificates, but as How do i renew they when necessary?
---
### Author:  [@ikakavas](https://discuss.elastic.co/u/ikakavas)
#### Post date: [March 29, 2022, 12:18pm UTC](https://discuss.elastic.co/t/doubts-for-ssl-certs-renew-on-elk-stack-v8/300959/2 "2022-03-29T12:18:20Z")
Hi there, have you looked at our documentation : [Updating node security certificates | Elasticsearch Guide [8.1] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/update-node-certs.html) ?
---
### Author:  [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)
#### Post date: [March 29, 2022, 1:05pm UTC](https://discuss.elastic.co/t/doubts-for-ssl-certs-renew-on-elk-stack-v8/300959/3 "2022-03-29T13:05:36Z")
my doubt is, i have one file that are called transport.p12, how i generate this file? this is the CA file and i just need to rename that?
in my Elasticsearch.yml i have this certs
```auto
xpack.security.enabled: true
xpack.security.enrollment.enabled: true
# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
xpack.security.http.ssl:
enabled: true
keystore.path: certs/http.p12
# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
enabled: true
verification_mode: certificate
keystore.path: certs/transport.p12
truststore.path: certs/transport.p12
```
---
### Author:  [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)
#### Post date: [March 29, 2022, 6:37pm UTC](https://discuss.elastic.co/t/doubts-for-ssl-certs-renew-on-elk-stack-v8/300959/4 "2022-03-29T18:37:49Z")
@ikakavas i saw in the documentation that you mentioned, this
> Regardless of the scenario, Elasticsearch monitors the SSL resources for updates by default, on a five-second interval. You can just copy the new certificate and key files (or keystore) into the Elasticsearch configuration directory and your nodes will detect the changes and reload the keys and certificates.
when the certs expires, they will renew automaticaly?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 26, 2022, 6:38pm UTC](https://discuss.elastic.co/t/doubts-for-ssl-certs-renew-on-elk-stack-v8/300959/5 "2022-04-26T18:38:23Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.