I’ve been working through the challenges of renewing my http and transport certificates on one of my nodes. Both were renewed using the same CA that was used prior. Although the elasticsearch service is now starting successfully, I’m still having issues. My node isn’t rejoining the cluster. Base…

This was resolved by generating new transport certificates for all nodes. On one node, generate new keys for all nodes, using elasticsearch-certutil cert -ca –multiple Distribute transport.p12 to each node. Update keystore with elasticsearch-keystore add “xpackPathtoKey” Update elasticsearch.yml…

Issues Getting Node to Rejoin Cluster after Renewing Certificates

Elastic Stack Elastic Agent

Rios (Rios) November 8, 2025, 9:49am 4

Something is not OK with path to certs or permissions.

Topic		Replies	Views
Cluster does not start after updating certificates Elasticsearch elastic-stack-security , docker	3	116	October 15, 2024
New Node Cert Issue Elasticsearch	2	620	May 24, 2018
ElasticSearch renew certificate errors Elasticsearch elastic-stack-security , docker	2	226	May 17, 2024
Expired ca.crt/nodes certificates - how to renew such certificates? Elasticsearch elastic-stack-security	5	1069	August 22, 2023
Updating node certificate on existing cluster Elasticsearch elastic-stack-security	3	4061	August 31, 2020

Issues Getting Node to Rejoin Cluster after Renewing Certificates

Related topics