# How to generate the enrollment-token for another node with ssl?

**URL:** <https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [June 21, 2023, 12:13pm UTC](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574 "2023-06-21T12:13:36Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [June 26, 2023, 1:29pm UTC](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574/5 "2023-06-26T13:29:28Z")

</div>

Hi @merson Welcome to the community.

Perhaps take a look at this.

> [@Elasticsearch-create-enrollment-token is not possible without a keystore ( aka with PEM certificates)](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-is-not-possible-without-a-keystore-aka-with-pem-certificates/336136/2):
>
> Hi @DavidDPD Welcome to the community, and apologies for the frustrating experience. Yes a bit frustrating and probably could be documented better. I think perhaps there is a fundamental "disconnect" At least this is how I understand it.... When you want to use your own certs etc, you are no longer using security auto configuration and thus when you use your own certs you should no longer be trying to "enroll" another node in the cluster using an enrollment token... the elasticsearch-create-…

In short if you set up your own certs (i.e. did not use security auto-configuration) you just need to manually setup your other nodes to join the clusters

---

_[View the full topic](https://discuss.elastic.co/t/how-to-generate-the-enrollment-token-for-another-node-with-ssl/336574)._