I was able to setup 3 node elastic cluster via elastic CA method - based on Setting up 3 node cluster for first time and getting errors - #2 by leandrojmp
Now, the requirement is to use certs provided by org, certified by org's CA. The problem I have is - I will get the root ca cert, but not the key and password. Since it is used to certify all other apps, cannot be shared with anyone.
How can I setup a cluster in this case?
Any help is greatly appreciated!!
Two ways:
Either generate a SUB CA that the Elastic CA can use to generate new certs for the
nodes OR you ask the CA owner to generate certs for all your nodes.
I suggest you read up on PKI hierarchy and it's fundamentals.
Thank you for your guidance @dot-mike .
In fact, the CA owner (the PKI team) has generated the certs for us. Since the CA cert key & password cannot be shared, I am now checking for the sub-CA option.