# Expiring cerificates - Cluster still functional?
**URL:** https://discuss.elastic.co/t/expiring-cerificates-cluster-still-functional/321528
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [December 19, 2022, 7:48am UTC](https://discuss.elastic.co/t/expiring-cerificates-cluster-still-functional/321528 "2022-12-19T07:48:26Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@smm](https://discuss.elastic.co/u/smm)
#### Post date: [December 19, 2022, 7:48am UTC](https://discuss.elastic.co/t/expiring-cerificates-cluster-still-functional/321528/1 "2022-12-19T07:48:26Z")
Dear community,
in 7x certificates secure the elasticsearch node to node communication, then the communication node to kibana and the client to kibana communication.
What happens if such a secured cluster its certificates get expired: is the cluster dead? Can you still work with the client but you only get some kind of allarms?
Any kind of insight in it is highly appreciated!
cheers
---
### Author:  [@dadiasish](https://discuss.elastic.co/u/dadiasish)
#### Post date: [December 19, 2022, 8:18am UTC](https://discuss.elastic.co/t/expiring-cerificates-cluster-still-functional/321528/2 "2022-12-19T08:18:12Z")
Hi,
You cluster might still be working, but your cluster will not be able to establish new connections between nodes. Effectively your cluster will fail, but at a future time.
It could happen due to a network issue, or because you need to restart a node for some reason and If you try restarting a node you should find that it cannot connect to the other nodes in the cluster and it'll not be able to authenticate and establish the connect with the existing cluster.
You will need to deploy new certificates.
```auto
GET /_ssl/certificates
```
Use the above command in Dev Tools to get details about your certificate and expiry days so that you can act accordingly.
Thanks.
---
### Author:  [@smm](https://discuss.elastic.co/u/smm)
#### Post date: [December 19, 2022, 12:55pm UTC](https://discuss.elastic.co/t/expiring-cerificates-cluster-still-functional/321528/3 "2022-12-19T12:55:42Z")
...it is possible to deactivate the securit\< settings for the communication between node to node and node to kibana. If a certificate runs out betwenn browser and kibana it shoud not be that terrible - I think https would be still in place but you would get an error.
Any thoughts? Thank you,
---
### Author:  [@dadiasish](https://discuss.elastic.co/u/dadiasish)
#### Post date: [December 19, 2022, 1:03pm UTC](https://discuss.elastic.co/t/expiring-cerificates-cluster-still-functional/321528/4 "2022-12-19T13:03:51Z")
I do not suggest you to disable the security. But if you still insist to do, then below is the way to do it.
Set the parameter `xpack.security.enabled: false` in elasticsearch.yml and kibana.yml and restart your cluster and the complete security will be disabled.
This will disable all the X-Pack security features including TLS, HTTPS, etc.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 16, 2023, 1:04pm UTC](https://discuss.elastic.co/t/expiring-cerificates-cluster-still-functional/321528/5 "2023-01-16T13:04:29Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.