# Exception while enabling the xpack in es7.17 **URL:** \ **Category:** Elasticsearch\ **Created:** [March 4, 2024, 12:26pm UTC](https://discuss.elastic.co/t/exception-while-enabling-the-xpack-in-es7-17/354636 "2024-03-04T12:26:29Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![navaneethan](https://avatars.discourse-cdn.com/v4/letter/n/f17d59/32.png) [@navaneethan](https://discuss.elastic.co/u/navaneethan)\ **Post date:** [March 4, 2024, 12:26pm UTC](https://discuss.elastic.co/t/exception-while-enabling-the-xpack-in-es7-17/354636/1 "2024-03-04T12:26:29Z")
Hi While enabling the xpack in elasticsearch 7.17, we are facing the below issue ElasticsearchSecurityException[failed to load SSL configuration [xpack.security.transport.ssl]]; nested: ElasticsearchException[failed to initialize SSL TrustManager]; nested: IOException[parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)]; nested: IOException[ObjectIdentifier() -- data isn't an object ID (tag = 48)]; Please check & help us on this ---
**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Post date:** [March 4, 2024, 12:33pm UTC](https://discuss.elastic.co/t/exception-while-enabling-the-xpack-in-es7-17/354636/2 "2024-03-04T12:33:41Z")
Hi @navaneethan, Can you share your configuration? ---
**Author:** ![navaneethan](https://avatars.discourse-cdn.com/v4/letter/n/f17d59/32.png) [@navaneethan](https://discuss.elastic.co/u/navaneethan)\ **Post date:** [March 4, 2024, 12:37pm UTC](https://discuss.elastic.co/t/exception-while-enabling-the-xpack-in-es7-17/354636/3 "2024-03-04T12:37:04Z")
Hi @carly.richmond Below is my elasticsearch.yml conf file ```auto cluster.name: cluster1 node.name: cf3 node.roles: [data,master] network.host: 0.0.0.0 http.port: 9106 transport.port: 9116 path.logs: /u01/elasticsearch_7.17.15/logs/${cluster.name}/${node.name} path.data: /u01/elasticsearch_7.17.15/data/${cluster.name}/${node.name} bootstrap.memory_lock: true discovery.seed_providers: file cluster.initial_master_nodes: cf1, cf2, cf3 action.destructive_requires_name: true xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification_mode: certificate xpack.security.transport.ssl.client_authentication: required xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12 xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12 ``` ---
**Author:** ![navaneethan](https://avatars.discourse-cdn.com/v4/letter/n/f17d59/32.png) [@navaneethan](https://discuss.elastic.co/u/navaneethan)\ **Post date:** [March 4, 2024, 12:42pm UTC](https://discuss.elastic.co/t/exception-while-enabling-the-xpack-in-es7-17/354636/4 "2024-03-04T12:42:00Z")
Hi @carly.richmond below are the steps i followed in my 7.17 cluster in home path ```auto bin/elasticsearch-certutil ca bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12 ``` add the below in each node ```auto bin/elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password bin/elasticsearch-keystore add xpack.security.transport.ssl.truststore.secure_password updated the yml params restarted the Elasticsearch nodes ``` ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [March 5, 2024, 4:49am UTC](https://discuss.elastic.co/t/exception-while-enabling-the-xpack-in-es7-17/354636/5 "2024-03-05T04:49:37Z")
Can you try running ```bash keytool -list -keystore /path/to/certs/elastic-certificates.p12 ``` (You'll need to replace `/path/to/` with the correct path to your certificate file) I expect that to give a similar error to the one Elasticsearch is logging, in which case we can infer that the problem is with your PKCS#12 file (and we'll need to work out why) ---
**Author:** ![navaneethan](https://avatars.discourse-cdn.com/v4/letter/n/f17d59/32.png) [@navaneethan](https://discuss.elastic.co/u/navaneethan)\ **Post date:** [March 5, 2024, 6:22am UTC](https://discuss.elastic.co/t/exception-while-enabling-the-xpack-in-es7-17/354636/6 "2024-03-05T06:22:09Z")
Hi @TimV We are getting the below result after running the above Keystore type: PKCS12 Keystore provider: SUN Your keystore contains 2 entries ca, Mar 4, 2024, trustedCertEntry, Certificate fingerprint (SHA-256): C3:D3:D9:00:2E:F1:F6:D2:09:EB:0A:D3:09:D2:13:3C:30:78:D5:6C:CE:40:9F:CC:57:D2:B1:B8:72:75:33:04 instance, Mar 4, 2024, PrivateKeyEntry, Certificate fingerprint (SHA-256): ED:FB:32:53:B6:46:10:E9:26:AE:47:13:20:DC:BF:50:8F:AA:F0:48:75:16:C3:24:F3:07:2B:BB:1B:FF:C8:ED ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [March 6, 2024, 12:09am UTC](https://discuss.elastic.co/t/exception-while-enabling-the-xpack-in-es7-17/354636/7 "2024-03-06T00:09:30Z")
Are you seeing the same error on all nodes? Please post the full stack trace from the logs so we can try to work out exactly where the problem is happening. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 3, 2024, 12:10am UTC](https://discuss.elastic.co/t/exception-while-enabling-the-xpack-in-es7-17/354636/8 "2024-04-03T00:10:12Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.