# How Can I generate Root-ca.pem for Elasticsearch for integrating with wazuh

**URL:** <https://discuss.elastic.co/t/how-can-i-generate-root-ca-pem-for-elasticsearch-for-integrating-with-wazuh/352835>\
**Category:** Elasticsearch\
**Created:** [February 8, 2024, 9:08am UTC](https://discuss.elastic.co/t/how-can-i-generate-root-ca-pem-for-elasticsearch-for-integrating-with-wazuh/352835 "2024-02-08T09:08:07Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![fahim2024](https://avatars.discourse-cdn.com/v4/letter/f/bc8723/32.png) [@fahim2024](https://discuss.elastic.co/u/fahim2024)\
**Post date:** [February 8, 2024, 9:08am UTC](https://discuss.elastic.co/t/how-can-i-generate-root-ca-pem-for-elasticsearch-for-integrating-with-wazuh/352835/1 "2024-02-08T09:08:07Z")

</div>

It would be great if someone help me with step by step guidance with explanation

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [February 8, 2024, 11:54am UTC](https://discuss.elastic.co/t/how-can-i-generate-root-ca-pem-for-elasticsearch-for-integrating-with-wazuh/352835/2 "2024-02-08T11:54:18Z")

</div>

Hi @fahim2024,

|I'm not very familiar with Wazuh. But have you looked at generating the certificate using the [`elasticsearch-certutil as covered in the documentation`](https://www.elastic.co/guide/en/elasticsearch/reference/current/certutil.html)?

---

<div class="post-metadata">

**Author:** ![fahim2024](https://avatars.discourse-cdn.com/v4/letter/f/bc8723/32.png) [@fahim2024](https://discuss.elastic.co/u/fahim2024)\
**Post date:** [February 8, 2024, 12:35pm UTC](https://discuss.elastic.co/t/how-can-i-generate-root-ca-pem-for-elasticsearch-for-integrating-with-wazuh/352835/3 "2024-02-08T12:35:57Z")

</div>

with this certutil tool ,we can create elasticsearch-ca.pem .but I guess that is not root-ca.pem .I actually dont know how can I do the whole process. Would be great if you go through .

> **[Elastic Stack integration · Wazuh documentation](https://documentation.wazuh.com/current/integrations-guide/elastic-stack/index.html)**
>
> User manual, installation and configuration guides. Learn how to get the most out of the Wazuh platform.

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [February 8, 2024, 1:28pm UTC](https://discuss.elastic.co/t/how-can-i-generate-root-ca-pem-for-elasticsearch-for-integrating-with-wazuh/352835/4 "2024-02-08T13:28:00Z")

</div>

> [@fahim2024](#):
>
> with this certutil tool ,we can create elasticsearch-ca.pem .but I guess that is not root-ca.pem

It is the same thing, using the certutil in the CA mode will create a CA that you can use to sign the other certificates, elastic documentation calls it `elasticsearch-ca.pem` per default if I'm not wrong, you can rename it to whatever you want.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 7, 2024, 1:28pm UTC](https://discuss.elastic.co/t/how-can-i-generate-root-ca-pem-for-elasticsearch-for-integrating-with-wazuh/352835/5 "2024-03-07T13:28:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.