# Kibana - Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain

**URL:** <https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate-in-certificate-chain/299159>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [March 9, 2022, 2:35am UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate-in-certificate-chain/299159 "2022-03-09T02:35:20Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [March 9, 2022, 6:35am UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate-in-certificate-chain/299159/3 "2022-03-09T06:35:16Z")

</div>

> [@elasticScrub](#):
>
> I found a fix which was to change in kibana.yml `elasticsearch.hosts: ["http://10.0.2.15:9200"]` to `elasticsearch.hosts: ["https://10.0.2.15:9200"]` . HTTP to HTTPS.

If you want to use the enrollment process, then you should not make configuration changes to your kibana.yml but let the enrollment process handle this for you.

Remove ` elasticsearch.hosts: ["https://10.0.2.15:9200"]` and start the kibana service again. When you navigate to [http://localhost:5601/](http://localhost:5601/) you will be prompted to enter the enrollment token you generated in Elasticsearch ( please generate a new one, each enrollment token is only valid for 30 minutes)

---

_[View the full topic](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-self-signed-certificate-in-certificate-chain/299159)._
