# Elastic operator TLS self-signed certificates

**URL:** https://discuss.elastic.co/t/elastic-operator-tls-self-signed-certificates/270049
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [April 13, 2021, 6:15pm UTC](https://discuss.elastic.co/t/elastic-operator-tls-self-signed-certificates/270049 "2021-04-13T18:15:09Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![ewolfman](https://avatars.discourse-cdn.com/v4/letter/e/5f8ce5/32.png) [@ewolfman](https://discuss.elastic.co/u/ewolfman)
#### Post date: [April 13, 2021, 6:15pm UTC](https://discuss.elastic.co/t/elastic-operator-tls-self-signed-certificates/270049/1 "2021-04-13T18:15:09Z")

</div>

Hi,

Using ECK we have set up a cluster with a self-signed certificate.  
However the documentation ([TLS certificates | Elastic Cloud on Kubernetes [1.5] | Elastic](https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-tls-certificates.html#k8s-default-self-signed-certificate)) is not clear how to set/install this certificate in the cluster so it'll be valid for calling clients **within the cluster** (java, .net, which are failing as they cannot validate the self-signed certificates).

Can you please provide guidance what should be the step for establishing the self-signed certificate as one that can be recognized by clients? For example, should we be validating it in the client code ([Encrypted communication | Java REST Client [7.12] | Elastic](https://www.elastic.co/guide/en/elasticsearch/client/java-rest/current/_encrypted_communication.html)). Or, must we generate a 'real' certificate to be used for this to work (as specified here: [TLS certificates | Elastic Cloud on Kubernetes [1.5] | Elastic](https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-tls-certificates.html#k8s-setting-up-your-own-certificate))

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 11, 2021, 6:15pm UTC](https://discuss.elastic.co/t/elastic-operator-tls-self-signed-certificates/270049/2 "2021-05-11T18:15:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
