# Winlogbeat SSL

**URL:** <https://discuss.elastic.co/t/winlogbeat-ssl/280181>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [August 2, 2021, 3:59am UTC](https://discuss.elastic.co/t/winlogbeat-ssl/280181 "2021-08-02T03:59:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Abdullah\_Al-Mansour1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abdullah_al-mansour1/32/92415_2.png) [@Abdullah\_Al-Mansour1](https://discuss.elastic.co/u/Abdullah_Al-Mansour1)\
**Post date:** [August 2, 2021, 3:59am UTC](https://discuss.elastic.co/t/winlogbeat-ssl/280181/1 "2021-08-02T03:59:34Z")

</div>

Hello - I'm performing my first secure install of elastic stack. Everything is going well. I'm at the last leg of the race, ingesting data from Winlogbeat. I created a winlogbeat\_writer role, assigned it to a winlogbeat\_user etc. Then I hit a snag. I don't know how to do the following:

ssl.certificate: "/etc/pki/client/cert.pem" -1  
ssl.key: "/etc/pki/client/cert.key"

1. The distinguished name (DN) in the certificate must be mapped to the `winlogbeat_writer` and `kibana_user` roles in the `role_mapping.yml` configuration file on each node in the Elasticsearch cluster.

How do I do that?

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Post date:** [August 2, 2021, 10:58am UTC](https://discuss.elastic.co/t/winlogbeat-ssl/280181/2 "2021-08-02T10:58:38Z")

</div>

Take a look at step 7, [PKI user authentication | Elasticsearch Guide [7.13] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/pki-realm.html).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 30, 2021, 12:59pm UTC](https://discuss.elastic.co/t/winlogbeat-ssl/280181/3 "2021-08-30T12:59:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.