# Regenerate the SSL Certificate that was auto-generated on setup of ElasticSearch

**URL:** <https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216>\
**Category:** Elastic Search\
**Created:** [April 16, 2025, 5:22pm UTC](https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216 "2025-04-16T17:22:56Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [November 27, 2025, 4:32pm UTC](https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216/7 "2025-11-27T16:32:26Z")

</div>

Hi @Yaser_Amini Welcome to the community

1st place to start is the official documentation

> **[Update TLS certificates | Elastic Docs](https://www.elastic.co/docs/deploy-manage/security/updating-certificates)**
>
> You might need to update your TLS certificates if your current node certificates expire soon, you’re adding new nodes to your secured cluster, or a security...

And here are details on using the cert util

> **[elasticsearch-certutil | Reference](https://www.elastic.co/docs/reference/elasticsearch/command-line-tools/certutil)**
>
> The elasticsearch-certutil command simplifies the creation of certificates for use with Transport Layer Security (TLS) in the Elastic Stack. You can specify...

I like using the Silent Mode with instances.yml to create new certs with the correct SANs / IPs etc

> **[elasticsearch-certutil | Reference](https://www.elastic.co/docs/reference/elasticsearch/command-line-tools/certutil#certutil-silent)**
>
> The elasticsearch-certutil command simplifies the creation of certificates for use with Transport Layer Security (TLS) in the Elastic Stack. You can specify...

---

_[View the full topic](https://discuss.elastic.co/t/regenerate-the-ssl-certificate-that-was-auto-generated-on-setup-of-elasticsearch/377216)._
