# How to generate the enrollment-token for another node with ssl?
**URL:** https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574
**Category:** Kibana
**Tags:** elastic-stack-security
**Created:** [June 21, 2023, 12:13pm UTC](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574 "2023-06-21T12:13:36Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@merson](https://discuss.elastic.co/u/merson)
#### Post date: [June 21, 2023, 12:13pm UTC](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574/1 "2023-06-21T12:13:36Z")
Unable to create enrollment token for scope[node]
ERROR: Unable to create an enrollment token. Elasticsearch node HTTP layer ssl configuration Keystore doesn't contain any private entries where the associated certificate is a CA certificate
---
### Author:  [@Yang\_Wang](https://discuss.elastic.co/u/Yang_Wang)
#### Post date: [June 22, 2023, 3:36am UTC](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574/2 "2023-06-22T03:36:59Z")
This is a known issue see [Generating enrolment token for Kibana should not require the CA key · Issue #89017 · elastic/elasticsearch · GitHub](https://github.com/elastic/elasticsearch/issues/89017)
---
### Author:  [@merson](https://discuss.elastic.co/u/merson)
#### Post date: [June 22, 2023, 6:17am UTC](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574/3 "2023-06-22T06:17:55Z")
Thank you.
Let me check.
---
### Author:  [@merson](https://discuss.elastic.co/u/merson)
#### Post date: [June 26, 2023, 12:56pm UTC](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574/4 "2023-06-26T12:56:24Z")
but am facing this issue while generate a new node for elasticsearch-clustering
---
### Author:  [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [June 26, 2023, 1:29pm UTC](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574/5 "2023-06-26T13:29:28Z")
Hi @merson Welcome to the community.
Perhaps take a look at this.
> [@Elasticsearch-create-enrollment-token is not possible without a keystore ( aka with PEM certificates)](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-is-not-possible-without-a-keystore-aka-with-pem-certificates/336136/2):
>
> Hi @DavidDPD Welcome to the community, and apologies for the frustrating experience. Yes a bit frustrating and probably could be documented better. I think perhaps there is a fundamental "disconnect" At least this is how I understand it.... When you want to use your own certs etc, you are no longer using security auto configuration and thus when you use your own certs you should no longer be trying to "enroll" another node in the cluster using an enrollment token... the elasticsearch-create-…
In short if you set up your own certs (i.e. did not use security auto-configuration) you just need to manually setup your other nodes to join the clusters
---
### Author:  [@Yang\_Wang](https://discuss.elastic.co/u/Yang_Wang)
#### Post date: [June 27, 2023, 12:42am UTC](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574/6 "2023-06-27T00:42:50Z")
> [@merson](#):
>
> but am facing this issue while generate a new node for elasticsearch-clustering
The underlying cause is the same for node or kibana enrollment.
---
### Author:  [@merson](https://discuss.elastic.co/u/merson)
#### Post date: [June 27, 2023, 7:38am UTC](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574/7 "2023-06-27T07:38:20Z")
Thank you .
@stephenb
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 25, 2023, 7:39am UTC](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574/8 "2023-07-25T07:39:10Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.