# Xpack clarification **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [July 2, 2019, 11:34pm UTC](https://discuss.elastic.co/t/xpack-clarification/188586 "2019-07-02T23:34:09Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![dumkaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dumkaz/32/49228_2.png) [@dumkaz](https://discuss.elastic.co/u/dumkaz)\ **Post date:** [July 2, 2019, 11:34pm UTC](https://discuss.elastic.co/t/xpack-clarification/188586/1 "2019-07-02T23:34:09Z")
Hi. I have migrated recently company clusters to 6.8.1 to use great features of x-pack, that not a long ago has been released to open source. I have two questions though: 1. Can i use elasticsearch-certutil on one cluster to create 'ca' and p12 certificate bundles for using them on number of another elasticsearch clusters 2. how much overhead ,in terms of performance, internode SSL encryption, and authentication before posting messages for indexing caused. I mean could it be a concern for cluster that handles tens of Terabytes of log events daily ? Thank you ---
**Author:** ![dumkaz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dumkaz/32/49228_2.png) [@dumkaz](https://discuss.elastic.co/u/dumkaz)\ **Post date:** [July 4, 2019, 9:06pm UTC](https://discuss.elastic.co/t/xpack-clarification/188586/2 "2019-07-04T21:06:51Z")
As for the first one: It works fine. elasticsearch-certutil can create ca and certs for many others clusters: checked it practically Still not clear about the second ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 1, 2019, 9:06pm UTC](https://discuss.elastic.co/t/xpack-clarification/188586/3 "2019-08-01T21:06:53Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.