# Elasticsearch odbc

**URL:** <https://discuss.elastic.co/t/elasticsearch-odbc/228761>\
**Category:** Elasticsearch\
**Created:** [April 19, 2020, 9:12pm UTC](https://discuss.elastic.co/t/elasticsearch-odbc/228761 "2020-04-19T21:12:45Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![youu2020](https://avatars.discourse-cdn.com/v4/letter/y/e99b99/32.png) [@youu2020](https://discuss.elastic.co/u/youu2020)\
**Post date:** [April 19, 2020, 9:12pm UTC](https://discuss.elastic.co/t/elasticsearch-odbc/228761/1 "2020-04-19T21:12:45Z")

</div>

Hi, trying to configure elasticsearch odbc dsn I get this error

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/8/68528533cc2a8f1793409035fc1e786532e2e5c7.png)

---

<div class="post-metadata">

**Author:** ![KrishnaShah7](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krishnashah7/32/66810_2.png) [@KrishnaShah7](https://discuss.elastic.co/u/KrishnaShah7)\
**Post date:** [April 20, 2020, 1:08am UTC](https://discuss.elastic.co/t/elasticsearch-odbc/228761/2 "2020-04-20T01:08:07Z")

</div>

Hi @youu2020, referring to the [Elastic's official docs regarding the configuration](https://www.elastic.co/guide/en/elasticsearch/reference/master/sql-odbc-setup.html) , I believe you have checked the option: Enabled. Certificate identity chain validated.  
Here in, when you're uploading your certificate file, could you please check if you are also uploading the Root CA cert also ? Maybe the absence of that root cert is causing the invalid token.

---

<div class="post-metadata">

**Author:** ![youu2020](https://avatars.discourse-cdn.com/v4/letter/y/e99b99/32.png) [@youu2020](https://discuss.elastic.co/u/youu2020)\
**Post date:** [April 20, 2020, 9:37am UTC](https://discuss.elastic.co/t/elasticsearch-odbc/228761/3 "2020-04-20T09:37:07Z")

</div>

thank you @KrishnaShah7 for the answer.  
but I'm a beginner and I don't know what is the certificate file that I have to download it.

---

<div class="post-metadata">

**Author:** ![KrishnaShah7](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krishnashah7/32/66810_2.png) [@KrishnaShah7](https://discuss.elastic.co/u/KrishnaShah7)\
**Post date:** [April 21, 2020, 12:35am UTC](https://discuss.elastic.co/t/elasticsearch-odbc/228761/4 "2020-04-21T00:35:19Z")

</div>

@youu2020 : Certificate file validation is something you can do in order to secure your communcations. But if you want to simply test the connection, you can opt out intially, by selecting the first radio button in that security panel:

Disabled. All communications unencrypted.  
Test it then, and let us know?

Because if you select the option "Enabled. Certificate identity chain validated." , I am afraid you might have to provide the certificate file for your unix/windows system.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 19, 2020, 12:35am UTC](https://discuss.elastic.co/t/elasticsearch-odbc/228761/5 "2020-05-19T00:35:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.