# Elastic Cloud Enterprise - cannot upload my own certificates **URL:** \ **Category:** Elastic Cloud Enterprise (ECE)\ **Created:** [December 22, 2025, 3:42pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-cannot-upload-my-own-certificates/384221 "2025-12-22T15:42:37Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![CD9820](https://avatars.discourse-cdn.com/v4/letter/c/e9c0ed/32.png) [@CD9820](https://discuss.elastic.co/u/CD9820)\ **Post date:** [December 22, 2025, 3:42pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-cannot-upload-my-own-certificates/384221/1 "2025-12-22T15:42:38Z")
Hello I am installing ECE on prem. When uploading my own certificates I get this error. I followed these instructions but I still get the error : [Manage security certificates | Elastic Docs](https://www.elastic.co/docs/deploy-manage/security/secure-your-elastic-cloud-enterprise-installation/manage-security-certificates) ![image](https://us1.discourse-cdn.com/elastic/original/3X/3/1/31e25db69cab0e4b7d7c04c1c048784a4bc0ae20.png) Is there another way to install my certificates? Best regards Christophe ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [December 22, 2025, 3:59pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-cannot-upload-my-own-certificates/384221/2 "2025-12-22T15:59:45Z")
Hi @CD9820 Since you are using ECE which is a licensed product you should open a Support ticket, that will be you best path to resolution. ---
**Author:** ![CD9820](https://avatars.discourse-cdn.com/v4/letter/c/e9c0ed/32.png) [@CD9820](https://discuss.elastic.co/u/CD9820)\ **Post date:** [December 23, 2025, 8:57am UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-cannot-upload-my-own-certificates/384221/3 "2025-12-23T08:57:03Z")
Hello, I did submit a ticket to support but did not get a reply to date. Asking advice from my peers in the field never hurts I guess. Anyway, I did some research myself and solved the issue. Problem: I converted the key to an rsa key with openssl, which uses by default PKCS#8. Apparently ECE requires PKCS#1, so I had to add the ‘–traditional’ parameter in my openssl command to generate a valid ECE rsa key. Steps: I generated my own pfx file. Extract key from pfx: openssl pkcs12 -in ‘file.pfx‘ -nocerts -nodes -out ‘private.key‘ Convert key to valid rsa format: openssl rsa -in ‘private.key‘ -traditional -out ‘private\_rsa.key‘ Extract certificate from pfx: openssl pkcs12 -in ‘file.pfx‘ -clcerts -nokeys -out ‘file.crt‘ Extract chain from pfx: openssl pkcs12 -in ‘file.pfx’ -cacerts -nokeys -out ‘chain.crt’ Manually create a file containing: private rsa key - certificate - intermediate - root After that the uploaded file was accepted by ECE. Best regards Christophe ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [December 23, 2025, 3:31pm UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-cannot-upload-my-own-certificates/384221/4 "2025-12-23T15:31:51Z")
Hi @CD9820 > [@CD9820](#): > > Asking advice from my peers in the field never hurts I guess. Absolutely, no problem. We do answer a lot of cert questions here, just not a lot of ECE Questions, since it comes with support, and often not easy to replicae issues. > [@CD9820](#): > > Problem: I converted the key to an rsa key with openssl, which uses by default PKCS#8. Apparently ECE requires PKCS#1, so I had to add the ‘–traditional’ parameter in my openssl command to generate a valid ECE rsa key. Yup, makes sense, and thank you for posting your solution > [@CD9820](#): > > I did submit a ticket to support but did not get a reply to date. No Answer? ☹ You should contact your Elastic Account team.