# Regenerate the SSL Certificate that was auto-generated on setup of ElasticSearch

**URL:** <https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216>\
**Category:** Elastic Search\
**Created:** [April 16, 2025, 5:22pm UTC](https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216 "2025-04-16T17:22:56Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![frdh-samuelw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/frdh-samuelw/32/142676_2.png) [@frdh-samuelw](https://discuss.elastic.co/u/frdh-samuelw)\
**Post date:** [April 16, 2025, 5:22pm UTC](https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216/1 "2025-04-16T17:22:56Z")

</div>

Hello!

We have been using Elasticsearch with Zammad on an Ubuntu server for several months, and we recently moved the server to a new IP address. Because Elasticsearch was set up with the former IP address, the auto-generated SSL Certificate, "/etc/elasticsearch/certs/http\_ca.crt", is not working with the new IP address. Specifically, it gives an error that the IP address does not match the one in the certificate.

We were wondering if there was a command to use that would regenerate this SSL Certificate based on the current IP settings? I tried using the

`bin/elasticsearch-certutil`

command but when I do that it says that there is "no such file or directory". I am unable to use that command, and based on my reading of the webpage:

> **[elasticsearch-certutil | Elastic Documentation](https://www.elastic.co/docs/reference/elasticsearch/command-line-tools/certutil#certutil)**
>
> The elasticsearch-certutil command simplifies the creation of certificates for use with Transport Layer Security (TLS) in the Elastic Stack. You can specify...

I do not know if that would solve our issue as we are not trying to create a new Certificate Authority or a whole new set of certificates and keys, just the one that was generated on setup.

Please let me know if there is any more information that you would need to get a better idea of our situation, and thank you in advance for your help.

---

_[View the full topic](https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216)._
