# Elastic Agent show \`Error dialing x509: certificate signed by unknown authority\` but it is healthy in fleet

**URL:** <https://discuss.elastic.co/t/elastic-agent-show-error-dialing-x509-certificate-signed-by-unknown-authority-but-it-is-healthy-in-fleet/329514>\
**Category:** Elastic Agent\
**Created:** [April 6, 2023, 12:56pm UTC](https://discuss.elastic.co/t/elastic-agent-show-error-dialing-x509-certificate-signed-by-unknown-authority-but-it-is-healthy-in-fleet/329514 "2023-04-06T12:56:46Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![Kelvin\_Chan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kelvin_chan/32/119470_2.png) [@Kelvin\_Chan](https://discuss.elastic.co/u/Kelvin_Chan)\
**Post date:** [April 6, 2023, 3:45pm UTC](https://discuss.elastic.co/t/elastic-agent-show-error-dialing-x509-certificate-signed-by-unknown-authority-but-it-is-healthy-in-fleet/329514/3 "2023-04-06T15:45:20Z")

</div>

After i read [relative answer](https://discuss.elastic.co/t/elastic-agent-error-dialing-x509-certificate-signed-by-unknown-authority/315675/5) then add fingerprint to _Elasticsearch CA trusted fingerprint (optional)_ and `ssl.certificate_authorities: ["/usr/share/elastic-agent/certs/ca/ca.crt"] ` to _Advanced YAML configuration_. Agent and Fleet run successfully, but i still want to ask if i can set those arguments before docker compose build up?

---

_[View the full topic](https://discuss.elastic.co/t/elastic-agent-show-error-dialing-x509-certificate-signed-by-unknown-authority-but-it-is-healthy-in-fleet/329514)._