# Error while join a node, no subject alternative names **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [October 10, 2025, 4:31pm UTC](https://discuss.elastic.co/t/error-while-join-a-node-no-subject-alternative-names/382590 "2025-10-10T16:31:00Z")\ **Posts on this page:** 1\ **Showing post:** 3
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [October 17, 2025, 2:30am UTC](https://discuss.elastic.co/t/error-while-join-a-node-no-subject-alternative-names/382590/3 "2025-10-17T02:30:04Z")
Hi @gbschenkel Apologies but without a long explanation that is a very confusing error message for a end user to understand . In short, you don't use an enrollment token when you're manually configuring your nodes or created your own certs. It's not going to work, which is what it seems like you're doing. You just need to manually configure your nodes, with proper certs and discovery settings This is a little old but perhaps it will help. > [@Elasticsearch-create-enrollment-token is not possible without a keystore ( aka with PEM certificates)](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-is-not-possible-without-a-keystore-aka-with-pem-certificates/336136/2): > > Hi @DavidDPD Welcome to the community, and apologies for the frustrating experience. Yes a bit frustrating and probably could be documented better. I think perhaps there is a fundamental "disconnect" At least this is how I understand it.... When you want to use your own certs etc, you are no longer using security auto configuration and thus when you use your own certs you should no longer be trying to "enroll" another node in the cluster using an enrollment token... the elasticsearch-create-… --- _[View the full topic](https://discuss.elastic.co/t/error-while-join-a-node-no-subject-alternative-names/382590)._