# Help needed for certificate configuration

**URL:** <https://discuss.elastic.co/t/help-needed-for-certificate-configuration/349194>\
**Category:** Elasticsearch\
**Created:** [December 12, 2023, 8:46pm UTC](https://discuss.elastic.co/t/help-needed-for-certificate-configuration/349194 "2023-12-12T20:46:08Z")\
**Posts on this page:** 1\
**Showing post:** 9

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [December 14, 2023, 3:21pm UTC](https://discuss.elastic.co/t/help-needed-for-certificate-configuration/349194/9 "2023-12-14T15:21:37Z")

</div>

Hi @litronics, I am sorry this is turning out to be an issue.

1st, let's back up and try to understand exactly what you are trying to accomplish.

Are you trying to setup

1. A SIngle Node Cluster with Kibana with Security?
2. A multimode Node Cluster with Security?
3. Are you trying to manually configure security or use Auto Configuration?
4. What is your endstate?
5. What OS and install method did you use, tar.gz, docker, rpm?  
....

Looking at your last post, I ask because I think you are making some incorrect assumptions.

1st - Let me clear up something top-level. You have 2 choices when setting up security.

1. [Setp with security enabled automatically](https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-stack-security.html)
2. [Manually Setup Security](https://www.elastic.co/guide/en/elasticsearch/reference/current/manually-configure-security.html)

**You are mixing the 2 you can not manually or partially setup Security and then use the Enrollment Token method that will not work.** See details [here](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-is-not-possible-without-a-keystore-aka-with-pem-certificates/336136/2)

So tell me what you are trying to accomplish and then lets back up a bit..

If this has been about running the enrollment token from the get-go... after you manually configured security, that explains a lot. My apologies; I should have caught that sooner!!!

> [@litronics](#):
>
> My problem is that I cannot use elasticsearch command line tools like "_elasticsearch-reset-password_" or "_elasticsearch-create-enrollment-token_"

I was focusing in the reset-password.....

---

_[View the full topic](https://discuss.elastic.co/t/help-needed-for-certificate-configuration/349194)._