# Elasticsearch - authorization / certificates and change of IP \[?\]

**URL:** <https://discuss.elastic.co/t/elasticsearch-authorization-certificates-and-change-of-ip/214709>\
**Category:** Elasticsearch\
**Created:** [January 11, 2020, 5:32pm UTC](https://discuss.elastic.co/t/elasticsearch-authorization-certificates-and-change-of-ip/214709 "2020-01-11T17:32:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rysiu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rysiu/32/61919_2.png) [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Post date:** [January 11, 2020, 5:32pm UTC](https://discuss.elastic.co/t/elasticsearch-authorization-certificates-and-change-of-ip/214709/1 "2020-01-11T17:32:10Z")

</div>

If I have generated the certificates and set the specified addressing on the Elasticsearch nodes after the change of IP addressing will the certificates and authorization work without problems?

Certificates were generated on hostnames assigned to specific IP addresses (local: /etc/hosts - eg. via post: [https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash](https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash))

Additional question to relation to the topic: [Change of addressing of the entire Elasticsearch cluster](https://discuss.elastic.co/t/change-of-addressing-of-the-entire-elasticsearch-cluster/214707)

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [January 12, 2020, 6:29pm UTC](https://discuss.elastic.co/t/elasticsearch-authorization-certificates-and-change-of-ip/214709/2 "2020-01-12T18:29:10Z")

</div>

It depends on exactly how your system is configured. If you are fully validating the certificates and the certificates won't be valid after your changes then you will need new certificates. However if for instance you are accessing nodes by hostname, the certificates are attached to the nodes' hostnames and the hostnames aren't changing then this should still be fine.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 9, 2020, 6:41pm UTC](https://discuss.elastic.co/t/elasticsearch-authorization-certificates-and-change-of-ip/214709/3 "2020-02-09T18:41:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.