# Kibana is on a remote server **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-security\ **Created:** [September 17, 2021, 3:54pm UTC](https://discuss.elastic.co/t/kibana-is-on-a-remote-server/284497 "2021-09-17T15:54:32Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![rachelyang](https://avatars.discourse-cdn.com/v4/letter/r/51bf81/32.png) [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Post date:** [September 17, 2021, 3:54pm UTC](https://discuss.elastic.co/t/kibana-is-on-a-remote-server/284497/1 "2021-09-17T15:54:33Z")
I built an Elasticsearch cluster on server1(master) and server2(second), and a Kibana on server3. After I set up basic security for HTTP to encrypt communication between Kibana and Elasticsearch, I cannot restart Kibana. Here is my error message in kibana.log file. Failed to poll for work: ConnectionError: connect ECONNREFUSED 172.16.10.11:9200 You cannot use Remote Clusters because license information is not available at this time. "Unable to verify endpoint policies in line with license change: failed to fetch package policies: connect ECONNREFUSED 172.16.10.11:9200 "[Error: EACCES: permission denied, open '/run/kibana/kibana.pid'] {\n errno: -13,\n code: 'EACCES',\n syscall: 'open',\n path: '/run/kibana/kibana.pid'\n}" Does it indicate that I cannot install Kibana on a remote server? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 20, 2021, 4:40am UTC](https://discuss.elastic.co/t/kibana-is-on-a-remote-server/284497/2 "2021-09-20T04:40:00Z")
Can you please post more of your Kibana log. Please also check your Elasticsearch logs. ---
**Author:** ![rachelyang](https://avatars.discourse-cdn.com/v4/letter/r/51bf81/32.png) [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Post date:** [September 20, 2021, 5:21pm UTC](https://discuss.elastic.co/t/kibana-is-on-a-remote-server/284497/3 "2021-09-20T17:21:27Z")
Hi Mark, thank you. This is the error message in the kibana.log file. Please help to take a look. ["error","savedobjects-service"],"pid":23348,"message":"Unable to retrieve version information from Elasticsearch nodes. Hostname/IP does not match certificate's altnames: IP: 172.16.10.11 is not in the cert's list: "} ["error","savedobjects-service"],"pid":23348,"message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 172.16.10.11:9200"} ["error","savedobjects-service"],"pid":23348,"message":"Unable to retrieve version information from Elasticsearch nodes. Hostname/IP does not match certificate's altnames: IP: 172.16.10.11 is not in the cert's list: "} ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 20, 2021, 9:29pm UTC](https://discuss.elastic.co/t/kibana-is-on-a-remote-server/284497/4 "2021-09-20T21:29:59Z")
Thanks. It's good to please format your code/logs/config using the `` button, or markdown style back ticks. It helps to make things easy to read which helps us help you 🙂 That means that your TLS certificate setup process didn't include the IP address(es) of your Elasticsearch hosts. What documentation did you follow to set that up for Elasticsearch? ---
**Author:** ![rachelyang](https://avatars.discourse-cdn.com/v4/letter/r/51bf81/32.png) [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Post date:** [September 20, 2021, 9:46pm UTC](https://discuss.elastic.co/t/kibana-is-on-a-remote-server/284497/5 "2021-09-20T21:46:46Z")
I followed these docs: > **[Set up minimal security for Elasticsearch | Elasticsearch Guide \[7.14\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.14/security-minimal-setup.html)** > **[Set up basic security for the Elastic Stack | Elasticsearch Guide \[7.14\] |...](https://www.elastic.co/guide/en/elasticsearch/reference/7.14/security-basic-setup.html)** I set up elasticsearch cluster on server 172.16.10.11 (master) and 172.16.10.12 (data) and Kibana on 172.16.10.13 And generated security certs file on 172.16.10.11 and copied to 172.16.10.12 and 172.16.10.13, but it does not communicate between Elasticsearch and Kibana now. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 18, 2021, 9:46pm UTC](https://discuss.elastic.co/t/kibana-is-on-a-remote-server/284497/6 "2021-10-18T21:46:58Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.