# FATAL Error: EACCES: permission denied, open '/etc/kibana/certs/vm1.local.crt'

**URL:** <https://discuss.elastic.co/t/fatal-error-eacces-permission-denied-open-etc-kibana-certs-vm1-local-crt/189178>\
**Category:** Kibana\
**Created:** [July 6, 2019, 3:00am UTC](https://discuss.elastic.co/t/fatal-error-eacces-permission-denied-open-etc-kibana-certs-vm1-local-crt/189178 "2019-07-06T03:00:07Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![mhsh64](https://avatars.discourse-cdn.com/v4/letter/m/d6d6ee/32.png) [@mhsh64](https://discuss.elastic.co/u/mhsh64)\
**Post date:** [July 6, 2019, 3:00am UTC](https://discuss.elastic.co/t/fatal-error-eacces-permission-denied-open-etc-kibana-certs-vm1-local-crt/189178/1 "2019-07-06T03:00:07Z")

</div>

Hello.

I get the following after configuring kibana.yml to use certificate:

FATAL Error: EACCES: permission denied, open '/etc/kibana/certs/vm1.local.crt'

Below are permissions:

```
[root@vm1 certs]# ls -l /etc/kibana/
drw-rw---- 2 root kibana 56 Jul 4 05:22 certs
-rw-r--r-- 1 root root 5300 Jul 4 05:24 kibana.yml

[root@vm1 certs]# ls -l /etc/kibana/certs/
-rw-rw---- 1 root kibana 1192 Jul 4 04:24 vm1.local.com.crt
-rw-rw---- 1 root kibana 1675 Jul 4 04:24 vm1.local.com.key

```

/etc/kibana/kibana.yml

```
xpack.security.enabled: true
xpack.security.sessionTimeout: 600000
server.ssl.enabled: true
server.ssl.key: /etc/kibana/certs/vm1.local.com.key
server.ssl.certificate: /etc/kibana/certs/vm1.local.com.crt

```

I installed RPM version of Kibana. I was able to successfully implement for Elasticsearch encryption.

Can you help me what permissions/configuration I need.

Thanks in advance

---

<div class="post-metadata">

**Author:** ![jong99](https://avatars.discourse-cdn.com/v4/letter/j/9dc877/32.png) [@jong99](https://discuss.elastic.co/u/jong99)\
**Post date:** [July 8, 2019, 11:32am UTC](https://discuss.elastic.co/t/fatal-error-eacces-permission-denied-open-etc-kibana-certs-vm1-local-crt/189178/2 "2019-07-08T11:32:58Z")

</div>

Your config says

```auto
vm1.local.crt
vm1.local.key

```

but the files are in a different location:

```auto
vm1.local.com.crt
vm1.local.com.key

```

Is that the problem?

---

<div class="post-metadata">

**Author:** ![mhsh64](https://avatars.discourse-cdn.com/v4/letter/m/d6d6ee/32.png) [@mhsh64](https://discuss.elastic.co/u/mhsh64)\
**Post date:** [July 8, 2019, 1:05pm UTC](https://discuss.elastic.co/t/fatal-error-eacces-permission-denied-open-etc-kibana-certs-vm1-local-crt/189178/3 "2019-07-08T13:05:57Z")

</div>

Thanks for your response, not really. I had corrected that in my config file. I copied the old one here.

---

<div class="post-metadata">

**Author:** ![mhsh64](https://avatars.discourse-cdn.com/v4/letter/m/d6d6ee/32.png) [@mhsh64](https://discuss.elastic.co/u/mhsh64)\
**Post date:** [July 8, 2019, 1:09pm UTC](https://discuss.elastic.co/t/fatal-error-eacces-permission-denied-open-etc-kibana-certs-vm1-local-crt/189178/4 "2019-07-08T13:09:45Z")

</div>

In the meantime I copied my certs to a different directory with same permissions outside of kibana config directory and it worked. I do not know why

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 5, 2019, 1:09pm UTC](https://discuss.elastic.co/t/fatal-error-eacces-permission-denied-open-etc-kibana-certs-vm1-local-crt/189178/5 "2019-08-05T13:09:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.