# Добавление новых нод в кластер с настроенным security

**URL:** <https://discuss.elastic.co/t/security/241172>\
**Category:** Вопросы на русском языке\
**Created:** [July 14, 2020, 5:27pm UTC](https://discuss.elastic.co/t/security/241172 "2020-07-14T17:27:01Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![Sergei\_Frolov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sergei_frolov/32/47922_2.png) [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\
**Post date:** [July 22, 2020, 11:36am UTC](https://discuss.elastic.co/t/security/241172/8 "2020-07-22T11:36:24Z")

</div>

> [@Igor\_Motov](#):
>
> В противном случае, посмотрите [эту дискуссию](https://discuss.elastic.co/t/data/207533)

Игорь, делаю как тут описано:

` /usr/share/elasticsearch/bin/elasticsearch-certutil cert --ca /etc/elasticsearch/certs/ca/ca.crt --dns "ws-search-elk4a.blabla.ru"`

но у меня опять же просит пароль:

`Enter password for CA (/etc/elasticsearch/certs/ca/ca.crt) :`

Серты я генерил без пароля. Мне нужно добавить ноду в уже имеющийся кластер, со старым CA

вот похожая проблема на форуме, без ответа:

> [@Problem adding nodes to an elasticsearch cluster using SSL, TLS and HTTPS](https://discuss.elastic.co/t/problem-adding-nodes-to-an-elasticsearch-cluster-using-ssl-tls-and-https/223270):
>
> Hi. I have a cluster under development for testing, and now I have implemented SSL, TLS and HTTPS following this link: "[https://www.elastic.co/es/blog/configuring-ssl-tls-and-https-to](https://www.elastic.co/es/blog/configuring-ssl-tls-and-https-to) -secure-elasticsearch-kibana-beats-and-logstash ". Everything works correctly, but when you want to add a new node, it doesn't work. I understand that for the new node I must create other file.crt and file.key using the same ca.crt that was generated at startup. To do this I use the following command ./bin/elasti…

---

_[View the full topic](https://discuss.elastic.co/t/security/241172)._