# Error generating a custom certificate and private key for Fleet Server

**URL:** <https://discuss.elastic.co/t/error-generating-a-custom-certificate-and-private-key-for-fleet-server/330256>\
**Category:** Elasticsearch\
**Created:** [April 19, 2023, 12:57am UTC](https://discuss.elastic.co/t/error-generating-a-custom-certificate-and-private-key-for-fleet-server/330256 "2023-04-19T00:57:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Lelc79](https://avatars.discourse-cdn.com/v4/letter/l/43a26b/32.png) [@Lelc79](https://discuss.elastic.co/u/Lelc79)\
**Post date:** [April 19, 2023, 12:57am UTC](https://discuss.elastic.co/t/error-generating-a-custom-certificate-and-private-key-for-fleet-server/330256/1 "2023-04-19T00:57:13Z")

</div>

Hi Elastic community

I am generating my certificates to my Fleet Server

**Step1**  
./bin/elasticsearch-certutil ca --pem

i moved my CA.cert & ca.key to /path/to/ca

**Step2:**

./bin/elasticsearch-certutil cert   
--name FleetSrv   
--ca-cert /path/to/ca/ca.crt   
--ca-key /path/to/ca/ca.key   
--dns [ABC.DOMAIN.COM](http://ABC.DOMAIN.COM)   
--ip 192.0.1.20   
--pem

**Error**

```auto
Exception in thread "main" java.nio.file.NoSuchFileException: /path/to/ca/ca.crt
        at java.base/sun.nio.fs.UnixException.translateToIOException(UnixExcepti on.java:92)
        at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException .java:106)
        at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException .java:111)
        at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSy stemProvider.java:218)
        at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
        at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
        at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSys temProvider.java:422)
        at java.base/java.nio.file.Files.newInputStream(Files.java:160)
        at org.elasticsearch.common.ssl.PemUtils.readCertificates(PemUtils.java: 689)
        at org.elasticsearch.xpack.core.ssl.CertParsingUtils.readX509Certificate (CertParsingUtils.java:53)
        at org.elasticsearch.xpack.security.cli.CertificateTool$CertificateComma nd.loadPemCA(CertificateTool.java:386)
        at org.elasticsearch.xpack.security.cli.CertificateTool$CertificateComma nd.getCAInfo(CertificateTool.java:349)
        at org.elasticsearch.xpack.security.cli.CertificateTool$GenerateCertific ateCommand.getCAInfo(CertificateTool.java:759)
        at org.elasticsearch.xpack.security.cli.CertificateTool$GenerateCertific ateCommand.execute(CertificateTool.java:701)
        at org.elasticsearch.common.cli.EnvironmentAwareCommand.execute(Environm entAwareCommand.java:54)
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:8 5)
        at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:94)
        at org.elasticsearch.xpack.security.cli.CertificateTool.execute(Certific ateTool.java:160)
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:8 5)
        at org.elasticsearch.cli.Command.main(Command.java:50)
        at org.elasticsearch.launcher.CliToolLauncher.main(CliToolLauncher.java: 

```

I was reading this link [Configure SSL/TLS for self-managed Fleet Servers | Fleet and Elastic Agent Guide [8.7] | Elastic](https://www.elastic.co/guide/en/fleet/8.7/secure-connections.html) and i did only **step 1**

./bin/elasticsearch-certutil ca --pem

PLease help

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 17, 2023, 12:57am UTC](https://discuss.elastic.co/t/error-generating-a-custom-certificate-and-private-key-for-fleet-server/330256/2 "2023-05-17T00:57:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.