# ERROR: Failed to determine the health of the cluster. , with exit code 69 **URL:** \ **Category:** Elasticsearch\ **Tags:** painless, runtime-fields\ **Created:** [December 31, 2023, 2:02am UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150 "2023-12-31T02:02:31Z")\ **Posts on this page:** 1\ **Showing post:** 2
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [December 31, 2023, 3:55am UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150/2 "2023-12-31T03:55:59Z")
Per the [docs](https://www.elastic.co/guide/en/elasticsearch/reference/current/create-enrollment-token.html) Use the `--url` option with hostname or IP that is listed as the SAN in that first line error message like `--url https://192.168.1.105:9200` > [@zeynepyz](#): > > ```auto > ..... > the certificate has subject alternative names > > [IP:fe80:0:0:0:b9bc:f274:5403:3ea9,DNS:localhost,IP:192.168.1.104,IP:0:0:0:0:0:0:0:1,IP:127.0.0.1,IP:192.168.1.105,IP:fe80:0:0:0:75d5:a12b:1d99:f2f,DNS:zeymira]; the certificate is issued by [CN=Elasticsearch security auto-configuration HTTP CA]; > > the certificate is signed by (subject [CN=Elasticsearch security auto-configuration HTTP CA] fingerprint [2ca0f51b78a95e3ee9d16cc005646b149fe564e8] {trusted issuer}) which is self-issued; the [CN=Elasticsearch security auto-configuration HTTP CA] certificate is trusted in this ssl context ([xpack.security.http.ssl (with trust configuration: Composite-Trust{JDK-trusted-certs,StoreTrustConfig{path=certs/http.p12, password=, type=PKCS12, algorithm=PKIX}})]) > > java.security.cert.CertificateException: > > No subject alternative names matching > IP address 192.168.1.7 found > > ``` --- _[View the full topic](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150)._