Hello, I tried today to setup my ELK stack securely so I followed the documentation and created all certs that I need using the certutil and encrypted the CA and the node cert with passwords. I placed the http.p12 file to /etc/Elasticsearch/certs/ Elasticsearch. Then I updated the keystone as to…

Unable to create an enrollment token for Kibana. "Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificate"

cyberzlo March 8, 2022, 1:54am 6

Creating this due apt-get install is bad idea. I need do build on dev enviroment, I can't install ELK on prod... after moving I just edit network stuff and should work, but it don't as ELK hardcode IPs etc

1 Like

Topic		Replies	Views
Needed explanation for keystore's PrivateKey entries Elasticsearch elastic-stack-security	7	171	August 6, 2025
Create enrollment for kibana impossible with certificate Lets Encript Elasticsearch elastic-stack-security	4	1379	November 24, 2022
Creating an enrollment token in Elastic fails due to PrivateKey error Elasticsearch elastic-stack-security	5	2249	September 19, 2022
Cant create enrollment token with own certificates Elasticsearch elastic-stack-security	2	1475	July 30, 2022
Import CA Cert as PrivateKeyEntry to HTTP Keystore - Solve Unable to create enrollment token Error Elasticsearch elastic-stack-security	4	11760	October 5, 2022

Unable to create an enrollment token for Kibana. "Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificate"

Related topics