# TLS/SSL Encryption and Cert Issues FATAL Error 0906D06C:PEM routines:PEM\_read\_bio:no start line **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [November 13, 2018, 8:00pm UTC](https://discuss.elastic.co/t/tls-ssl-encryption-and-cert-issues-fatal-error-0906d06c-pem-routinesno-start-line/156538 "2018-11-13T20:00:56Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Ryan\_Downey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ryan_downey/32/35987_2.png) [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Post date:** [November 13, 2018, 8:00pm UTC](https://discuss.elastic.co/t/tls-ssl-encryption-and-cert-issues-fatal-error-0906d06c-pem-routinesno-start-line/156538/1 "2018-11-13T20:00:56Z")
I have Elasticsearch on one server named 789 and Kibana on another named 1260. I've currently made it up to the point where x-pack is enabled, xpack.security.transport.ssl settings "seem" ok; that is nothing stops communicating when its enabled and I can access the Kibana API. The problem I'm encountering is when I enable xpack.security.http.ssl, keystore.path and truststore.path. Once I uncomment those settings I get the, FATAL Error: error:0906D06C:PEM routines:PEM\_read\_bio:no start line, issue and I can not figure out how to get past this error. I've been reading other discussions that had this error I just can't seem to resolve it in any way. Below are my elasticsearch and kibana yml settings. URL's and Names are edited down. Elasticsearch.yml > bootstrap.memory\_lock: false > cluster.name: elasticsearch\_lab1 > http.port: 9200 > network.host: 10.XXX.XX.XXX > node.data: true > node.ingest: true > node.master: true > node.max\_local\_storage\_nodes: 1 > node.name: 789 > path.data: C:\ProgramData\Elastic\Elasticsearch\data > path.logs: C:\ProgramData\Elastic\Elasticsearch\logs > transport.tcp.port: 9300 > xpack.license.self\_generated.type: basic > xpack.security.enabled: true > xpack.security.transport.ssl.enabled: true > xpack.security.transport.ssl.verification\_mode: certificate > xpack.security.transport.ssl.keystore.path: C:\ProgramData\Elastic\Elasticsearch\config\certs\elastic-certificates.p12 > xpack.security.transport.ssl.truststore.path: C:\ProgramData\Elastic\Elasticsearch\config\certs\elastic-certificates.p12 > #xpack.security.http.ssl.enabled: true > #xpack.security.http.ssl.keystore.path: C:\ProgramData\Elastic\Elasticsearch\config\certs\elastic-certificates.p12 > #xpack.security.http.ssl.truststore.path: C:\ProgramData\Elastic\Elasticsearch\config\certs\elastic-certificates.p12 kibana.yml > server.port: 5601 > server.host: "1260" > server.name: "1260" > elasticsearch.url: "[https://789](https://789)" > kibana.index: ".kibana" > elasticsearch.username: "elastic" > elasticsearch.password: "Pleasework18" > xpack.security.encryptionKey: "please\_work\_for\_me\_every\_time123" > xpack.reporting.encryptionKey: "Pleasework18" > server.ssl.enabled: true > server.ssl.certificate: C:\ProgramData\Elastic\Elasticsearch\config\certs\elastic-certificates.p12 > server.ssl.key: C:\ProgramData\Elastic\Elasticsearch\config\certs\elastic-certificates.p12 > elasticsearch.ssl.verificationMode: certificate > logging.dest: stdout Primary error seems to be: FATAL { Error: error:0906D06C:PEM routines:PEM\_read\_bio:no start line Heres the full error output: > ---
**Author:** ![Ryan\_Downey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ryan_downey/32/35987_2.png) [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Post date:** [November 13, 2018, 9:05pm UTC](https://discuss.elastic.co/t/tls-ssl-encryption-and-cert-issues-fatal-error-0906d06c-pem-routinesno-start-line/156538/2 "2018-11-13T21:05:49Z")
After multiple attempts what seems to have worked is switching over to PEM as we are on Windows Server 2016. Makes sense to a certain extent and worth a try if you're having the same issue. ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [November 14, 2018, 12:49am UTC](https://discuss.elastic.co/t/tls-ssl-encryption-and-cert-issues-fatal-error-0906d06c-pem-routinesno-start-line/156538/3 "2018-11-14T00:49:53Z")
Kibana cannot read PKCS#12 certificates. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 12, 2018, 12:49am UTC](https://discuss.elastic.co/t/tls-ssl-encryption-and-cert-issues-fatal-error-0906d06c-pem-routinesno-start-line/156538/4 "2018-12-12T00:49:54Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.