# Elasticsearch Cross Cluster Search Implementation

**URL:** <https://discuss.elastic.co/t/elasticsearch-cross-cluster-search-implementation/259708>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security, ccs-cross-cluster-search\
**Created:** [December 28, 2020, 5:54am UTC](https://discuss.elastic.co/t/elasticsearch-cross-cluster-search-implementation/259708 "2020-12-28T05:54:49Z")\
**Posts on this page:** 1\
**Showing post:** 14

<div class="post-metadata">

**Author:** ![tusharnemade](https://avatars.discourse-cdn.com/v4/letter/t/67e7ee/32.png) [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Post date:** [December 31, 2020, 7:13am UTC](https://discuss.elastic.co/t/elasticsearch-cross-cluster-search-implementation/259708/14 "2020-12-31T07:13:04Z")

</div>

Hi Tim

I have executed keytool command in following ways to have both nodes of different cluster each , have their CA certificates trusted.

On Local Cluster node

```auto
[esearch@elk-localnode-1 ~]$ keytool -importkeystore -srckeystore /mnt/elasticsearch-7.8.0/config/certs/elastic-certificates-elk-remotenode-1.p12 -srcstorepass "elastic" -destkeystore /mnt/elasticsearch-7.8.0/config/certs/elastic-certificates.p12 -deststorepass "elastic"

Importing keystore /mnt/elasticsearch-7.8.0/config/certs/elastic-certificates-elk-remotenode-1.p12 to /mnt/elasticsearch-7.8.0/config/certs/elastic-certificates.p12...
Existing entry alias instance exists, overwrite? [no]: no
Enter new alias name (RETURN to cancel import for this entry): elk-remotenode-1-remote
Entry for alias instance successfully imported.
Existing entry alias ca exists, overwrite? [no]: no
Enter new alias name (RETURN to cancel import for this entry): elk-remotenode-1-ca
Entry for alias ca successfully imported.
Import command completed: 2 entries successfully imported, 0 entries failed or cancelled
[esearch@elk-localnode-1 ~]$

```

On Remote Cluster Node

```auto
[esearch@elk-remotenode-1 ~]$ keytool -importkeystore -srckeystore /mnt/elasticsearch-7.8.0/config/certs/elastic-certificates-elk-localnode-1.p12 -srcstorepass "elastic" -destkeystore /mnt/elasticsearch-7.8.0/config/certs/elastic-certificates.p12 -deststorepass "elastic"

Importing keystore /mnt/elasticsearch-7.8.0/config/certs/elastic-certificates-elk-localnode-1.p12 to /mnt/elasticsearch-7.8.0/config/certs/elastic-certificates.p12...
Existing entry alias instance exists, overwrite? [no]: no
Enter new alias name (RETURN to cancel import for this entry): elk-localnode-instance
Entry for alias instance successfully imported.
Existing entry alias ca exists, overwrite? [no]: no
Enter new alias name (RETURN to cancel import for this entry): elk-localnode-ca
Entry for alias ca successfully imported.
Import command completed: 2 entries successfully imported, 0 entries failed or cancelled

```

It did worked successfully as expected.

I will accept it as a solution in this forum.

Could you please help me in one more thing ...

I am generating Nodes Certificates using

```auto
elasticsearch-certutil ca

```

How to pass Alias names for Instance and CA while creating certificates.

Thanks  
Tushar Nemade

---

_[View the full topic](https://discuss.elastic.co/t/elasticsearch-cross-cluster-search-implementation/259708)._