# Verify PKI enabling in elastic nodes

**URL:** <https://discuss.elastic.co/t/verify-pki-enabling-in-elastic-nodes/166744>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [February 1, 2019, 2:03pm UTC](https://discuss.elastic.co/t/verify-pki-enabling-in-elastic-nodes/166744 "2019-02-01T14:03:26Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Post date:** [February 4, 2019, 9:33am UTC](https://discuss.elastic.co/t/verify-pki-enabling-in-elastic-nodes/166744/4 "2019-02-04T09:33:23Z")

</div>

See point 4 in the doc I shared above.

Your http layer TLS configuration need to also trust the client certificate. So you also need to set

```auto
xpack.security.http.ssl.certificate_authorities

```

with the same value as

```auto
xpack.security.authc.realms.pki1.certificate_authorities

```

or

```auto
xpack.security.http.ssl.verification_mode: none

```

( I wouldn't suggest that)

---

_[View the full topic](https://discuss.elastic.co/t/verify-pki-enabling-in-elastic-nodes/166744)._