Generating Node Certificates for X-Pack

Elastic Stack Elasticsearch
1

I am installing X-Pack on a 3 node cluster and am now at the step to generate the node certificates based on the X-Pack installation documentation.

Is it necessary to create a certificate authority (CA) on every node of the cluster or just on the first node?

There is also a step where the .p12 certificate should be copied into a /config/certs folder. Does this .p12 certificate need to be generated on each node or can I simply copy the certificate file generated on the first node into the other nodes in the cluster?

2

As long as the certificate contains the domain/ip of each node in the cluster, you can reuse it for all the nodes in that Cluster. And there is no need to create a CA for each then.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.