# Regenerate the SSL Certificate that was auto-generated on setup of ElasticSearch

**URL:** <https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216>\
**Category:** Elastic Search\
**Created:** [April 16, 2025, 5:22pm UTC](https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216 "2025-04-16T17:22:56Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [April 16, 2025, 5:29pm UTC](https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216/2 "2025-04-16T17:29:16Z")

</div>

Hi @frdh-samuelw

Seems a lot like this post

> [@Are the Self Signed Certs bound by IP / Hostname](https://discuss.elastic.co/t/are-the-self-signed-certs-bound-by-ip-hostname/377147/1):
>
> Hi, We have a cluster in which we have enabled TLS security. To enable the security we used the elastic cert utility to generate the cert and CA. While generation of the certs or the CA any of the prompts did not ask us about the Hostnames or IP. We generated just one certificate and used that cert in all the nodes. Now the machines are moving to new IP and we are confused if the previous cert which is working now will work or not. Are the certs generated with elasticsearch cert-util are bound …

What version are you on?

> [@frdh-samuelw](#):
>
> `bin/elasticsearch-certutil`
> 
> command but when I do that it says that there is "no such file or directory". I am unable to use that command, and based on my reading of the webpage:

Where are you running that from? /  
How did you install?

But yes you need to regenerate the Certs and then make sure if you created

> **[elasticsearch-certutil | Elastic Documentation](https://www.elastic.co/docs/reference/elasticsearch/command-line-tools/certutil#_examples_15)**
>
> The elasticsearch-certutil command simplifies the creation of certificates for use with Transport Layer Security (TLS) in the Elastic Stack. You can specify...

---

_[View the full topic](https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216)._
