# Elasticsearch shield SSL nodes unavailable **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [June 12, 2016, 11:45pm UTC](https://discuss.elastic.co/t/elasticsearch-shield-ssl-nodes-unavailable/52549 "2016-06-12T23:45:18Z")\ **Posts on this page:** 7\ **Page:** 2
**Author:** ![michael.heldebrant](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@michael.heldebrant](https://discuss.elastic.co/u/michael.heldebrant)\ **Post date:** [June 27, 2016, 2:57pm UTC](https://discuss.elastic.co/t/elasticsearch-shield-ssl-nodes-unavailable/52549/21 "2016-06-27T14:57:38Z")
What does keytool -list -keystore C:/elasticsearch-2.1.1/config/shield/ca/node01.jks Report being in the store? ---
**Author:** ![raaj\_mndl](https://avatars.discourse-cdn.com/v4/letter/r/c5a1d2/32.png) [@raaj\_mndl](https://discuss.elastic.co/u/raaj_mndl)\ **Post date:** [June 30, 2016, 6:53pm UTC](https://discuss.elastic.co/t/elasticsearch-shield-ssl-nodes-unavailable/52549/22 "2016-06-30T18:53:15Z")
> [@michael.heldebrant](#): > > -list -keystore C:/elasticsearch-2.1.1/config/shield/ca/node01.jks This is what I got. C:\Users\>"C:\Program Files\Java\jdk1.7.0\_79\jre\bin\keytool" -list -keystore C:/elasticsearch-2.1.1/config/shield/node01.jks Enter keystore password: Keystore type: JKS Keystore provider: SUN Your keystore contains 1 entry node01, Jun 20, 2016, trustedCertEntry, Certificate fingerprint (SHA1): C8:DA:A2:00:B9:04:8C:DE:C7:18:63:0D:89:4F:F7:DE:B3:E8:EE:BA ---
**Author:** ![michael.heldebrant](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@michael.heldebrant](https://discuss.elastic.co/u/michael.heldebrant)\ **Post date:** [June 30, 2016, 9:46pm UTC](https://discuss.elastic.co/t/elasticsearch-shield-ssl-nodes-unavailable/52549/23 "2016-06-30T21:46:47Z")
That should have your private key and signed request in it in addition to the CAcert. ---
**Author:** ![raaj\_mndl](https://avatars.discourse-cdn.com/v4/letter/r/c5a1d2/32.png) [@raaj\_mndl](https://discuss.elastic.co/u/raaj_mndl)\ **Post date:** [July 19, 2016, 3:22pm UTC](https://discuss.elastic.co/t/elasticsearch-shield-ssl-nodes-unavailable/52549/24 "2016-07-19T15:22:28Z")
Sorry, I had to go off track as this was consuming a lot of time without any progress. I used this command to generate the private key. > "C:\Program Files\Java\jdk1.7.0\_79\jre\bin\keytool" -genkey -alias node01 -keystore node01.jks -keyalg RSA -keysize 2048 -validity 712 -ext san=DNS:vd-w7-122.dtenet.com After all the steps mentioned in that link, this was the last command I executed to instal the certificate. > "C:\Program Files\Java\jdk1.7.0\_79\jre\bin\keytool" -importcert -keystore node01.jks -file vd-w7-122\_dtenet\_com\_cert.cer -alias node01 ---
**Author:** ![michael.heldebrant](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@michael.heldebrant](https://discuss.elastic.co/u/michael.heldebrant)\ **Post date:** [July 25, 2016, 3:23pm UTC](https://discuss.elastic.co/t/elasticsearch-shield-ssl-nodes-unavailable/52549/25 "2016-07-25T15:23:01Z")
Did this somehow make multiple keystores in different places on the filesystem? If these commands didn't fail they should be in your keystore. ---
**Author:** ![raaj\_mndl](https://avatars.discourse-cdn.com/v4/letter/r/c5a1d2/32.png) [@raaj\_mndl](https://discuss.elastic.co/u/raaj_mndl)\ **Post date:** [August 8, 2016, 8:58pm UTC](https://discuss.elastic.co/t/elasticsearch-shield-ssl-nodes-unavailable/52549/26 "2016-08-08T20:58:24Z")
After verifying all my sources and also re executing all the steps.There is only one .jks file thats being generated. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-shield-ssl-nodes-unavailable/52549/27 "2017-07-06T13:42:25Z")
Closed on July 6, 2017, 1:42pm UTC [Previous page](https://discuss.elastic.co/t/elasticsearch-shield-ssl-nodes-unavailable/52549.md?page=1)