# Elasticsearch-certutil parameters

**URL:** <https://discuss.elastic.co/t/elasticsearch-certutil-parameters/319529>\
**Category:** Elasticsearch\
**Created:** [November 22, 2022, 9:08am UTC](https://discuss.elastic.co/t/elasticsearch-certutil-parameters/319529 "2022-11-22T09:08:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![adrien\_moreau](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adrien_moreau/32/101590_2.png) [@adrien\_moreau](https://discuss.elastic.co/u/adrien_moreau)\
**Post date:** [November 22, 2022, 9:08am UTC](https://discuss.elastic.co/t/elasticsearch-certutil-parameters/319529/1 "2022-11-22T09:08:15Z")

</div>

Hello,

I am using Elasticsearch on a self managed cluster and I had to use the "elasticsearch-certutil" tool to manage my cluster certificates.  
The help menu from the tool only lists the following options

```auto
Simplifies certificate creation for use with the Elastic Stack

Commands
--------
csr - generate certificate signing requests
cert - generate X.509 certificates and keys
ca - generate a new local certificate authority
http - generate a new certificate (or certificate request) for the Elasticsearch HTTP interface

Non-option arguments:
command

Option Description
------ -----------
-E <KeyValuePair> Configure a setting
-h, --help Show help
-s, --silent Show minimal output
-v, --verbose Show verbose output

```

However the official documentation mentions the following usage of this command:

```auto

./bin/elasticsearch-certutil cert \
  --name fleet-server \
  --ca-cert /path/to/ca/ca.crt \
  --ca-key /path/to/ca/ca.key \
  --dns your.host.name.here \
  --ip 192.0.2.1 \
  --pem

```

Why are --name, --ca-cert, --ca-key, --dns, --ip, --pem options not listed in the help menu?  
Where can I get the exhaustive list of those options?  
Any help appreciated, even if it is a simple link to a source file.

---

<div class="post-metadata">

**Author:** ![adrien\_moreau](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adrien_moreau/32/101590_2.png) [@adrien\_moreau](https://discuss.elastic.co/u/adrien_moreau)\
**Post date:** [November 22, 2022, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-certutil-parameters/319529/2 "2022-11-22T13:47:45Z")

</div>

Actually I just had to type:

```auto
elasticsearch-certutil cert --help

```

...

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 20, 2022, 1:48pm UTC](https://discuss.elastic.co/t/elasticsearch-certutil-parameters/319529/3 "2022-12-20T13:48:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.