# Fleet server install failed on fresh ELK stack 8.2.0

**URL:** <https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465>\
**Category:** Elasticsearch\
**Tags:** fleet, elastic-agent\
**Created:** [May 11, 2022, 12:33pm UTC](https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465 "2022-05-11T12:33:48Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Peter\_Bodnar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/peter_bodnar/32/99007_2.png) [@Peter\_Bodnar](https://discuss.elastic.co/u/Peter_Bodnar)\
**Post date:** [May 11, 2022, 12:33pm UTC](https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465/1 "2022-05-11T12:33:48Z")

</div>

Hello, i have problem to install Fleet server on fresh ELK stack 8.2.0 (RHEL 8)  
Elasticsearch and kibana working fine, but when tried to install fleet server (enroll agent as fleet server, based on provided instructions from Kibana UI and/or documentation), got response:

```auto
{"log.level":"error","@timestamp":"2022-05-11T14:15:43.732+0200","log.origin":{"file.name":"status/reporter.go","file.line":236},"message":"Elastic Agent status changed to: 'error'","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2022-05-11T14:15:43.732+0200","log.origin":{"file.name":"log/reporter.go","file.line":36},"message":"2022-05-11T14:15:43+02:00 - message: Application: fleet-server--8.2.0[]: State changed to FAILED: Error - Forbidden - type: 'ERROR' - sub_type: 'FAILED'","ecs.version":"1.6.0"}

```

firs time tried as Quick-start (self signed certificate, then used certificates signed by company internal CA, still same error

any ideas?  
thank

---

<div class="post-metadata">

**Author:** ![zx8086](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zx8086/32/94917_2.png) [@zx8086](https://discuss.elastic.co/u/zx8086)\
**Post date:** [May 11, 2022, 1:10pm UTC](https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465/2 "2022-05-11T13:10:53Z")

</div>

Welcome @Peter_Bodnar !

Just to confirm the issue, does this work with the --insecure flag ?

Also have you checked the permissions on the certs ? that they are readable ?

---

<div class="post-metadata">

**Author:** ![Peter\_Bodnar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/peter_bodnar/32/99007_2.png) [@Peter\_Bodnar](https://discuss.elastic.co/u/Peter_Bodnar)\
**Post date:** [May 11, 2022, 1:22pm UTC](https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465/3 "2022-05-11T13:22:22Z")

</div>

yes, certs are readable  
tried also with self signed certs, same error  
tried with --insecure flag, same error

---

<div class="post-metadata">

**Author:** ![zx8086](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zx8086/32/94917_2.png) [@zx8086](https://discuss.elastic.co/u/zx8086)\
**Post date:** [May 11, 2022, 1:26pm UTC](https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465/4 "2022-05-11T13:26:56Z")

</div>

What command are you running on the command line ? Is it running with sudo privileges ?

---

<div class="post-metadata">

**Author:** ![Peter\_Bodnar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/peter_bodnar/32/99007_2.png) [@Peter\_Bodnar](https://discuss.elastic.co/u/Peter_Bodnar)\
**Post date:** [May 11, 2022, 1:32pm UTC](https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465/5 "2022-05-11T13:32:43Z")

</div>

it run as root user  
command from kibana UI fleet server installation (agent installed form RPM, but it doesn't matter, same problem with agnet from tar.gz) :

```auto
 elastic-agent enroll --url=https://*IP*:8220 \
  --fleet-server-es=https://*IP*:9200 \
  --fleet-server-service-token= ***token generathen within Kibana UI*** \
  --fleet-server-policy=0b8fb260-cf76-11ec-b411-0bb14ba68cb2 \
  --fleet-server-es-ca-trusted-fingerprint=6206ac54e5222f6c92dd5758c932298b837c12d3a4b6fdc0e51df9c32ffe82e5 \
  --certificate-authorities=<PATH_TO_CA> \
  --fleet-server-cert=<PATH_TO_FLEET_SERVER_CERT> \
  --fleet-server-cert-key=<PATH_TO_FLEET_SERVER_CERT_KEY>

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 8, 2022, 1:33pm UTC](https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465/6 "2022-06-08T13:33:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.