Hello, I tried today to setup my ELK stack securely so I followed the documentation and created all certs that I need using the certutil and encrypted the CA and the node cert with passwords. I placed the http.p12 file to /etc/Elasticsearch/certs/ Elasticsearch. Then I updated the keystone as to…

Unable to create an enrollment token for Kibana. "Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificate"

maof97 (Maof97) February 14, 2022, 8:32pm 5

Yeah because of restrictions I have to install ES using a different interface than the one used in production. Maybe add a feature to specify the production IP address on installation for cases like mine.

Topic		Replies	Views
Needed explanation for keystore's PrivateKey entries Elasticsearch elastic-stack-security	7	215	August 6, 2025
Create enrollment for kibana impossible with certificate Lets Encript Elasticsearch elastic-stack-security	4	1391	November 24, 2022
Creating an enrollment token in Elastic fails due to PrivateKey error Elasticsearch elastic-stack-security	5	2266	September 19, 2022
Cant create enrollment token with own certificates Elasticsearch elastic-stack-security	2	1485	July 30, 2022
Import CA Cert as PrivateKeyEntry to HTTP Keystore - Solve Unable to create enrollment token Error Elasticsearch elastic-stack-security	4	11854	October 5, 2022

Unable to create an enrollment token for Kibana. "Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificate"

Related topics