# Self-signed certificates in ElasticSearch **URL:** \ **Category:** Elastic Cloud on Kubernetes (ECK)\ **Created:** [November 18, 2020, 6:57am UTC](https://discuss.elastic.co/t/self-signed-certificates-in-elasticsearch/255791 "2020-11-18T06:57:00Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![knagasri](https://avatars.discourse-cdn.com/v4/letter/k/47e85d/32.png) [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Post date:** [November 18, 2020, 6:57am UTC](https://discuss.elastic.co/t/self-signed-certificates-in-elasticsearch/255791/1 "2020-11-18T06:57:00Z")
By default Elastic operator generates self-signed certificates automatically in the form secrets. Does the operator take care of cert rotation? ---
**Author:** ![sebgl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sebgl/32/48702_2.png) [@sebgl](https://discuss.elastic.co/u/sebgl)\ **Post date:** [November 18, 2020, 8:21am UTC](https://discuss.elastic.co/t/self-signed-certificates-in-elasticsearch/255791/2 "2020-11-18T08:21:02Z")
Yes. Certificates are configured for a validity of 1 year by default. They are rotated automatically 24h before that 1 year period is reached. You can tweak those periods through operator configuration: [https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-operator-config.html](https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-operator-config.html). ---
**Author:** ![knagasri](https://avatars.discourse-cdn.com/v4/letter/k/47e85d/32.png) [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Post date:** [November 18, 2020, 8:48am UTC](https://discuss.elastic.co/t/self-signed-certificates-in-elasticsearch/255791/3 "2020-11-18T08:48:02Z")
Thank you @sebgl ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 4, 2022, 8:17am UTC](https://discuss.elastic.co/t/self-signed-certificates-in-elasticsearch/255791/4 "2022-11-04T08:17:53Z")