# Client / node certificate

**URL:** <https://forum.search-guard.com/t/client-node-certificate/1503>\
**Category:** Search Guard\
**Created:** [May 16, 2019, 7:42am UTC](https://forum.search-guard.com/t/client-node-certificate/1503 "2019-05-16T07:42:40Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![steman](https://avatars.discourse-cdn.com/v4/letter/s/b9e5f3/32.png) [@steman](https://forum.search-guard.com/u/steman)\
**Post date:** [May 16, 2019, 7:42am UTC](https://forum.search-guard.com/t/client-node-certificate/1503/1 "2019-05-16T07:42:40Z")

</div>

Hi there,  
I have struggles with the topic client certificate needed for securityadmin.sh.  
I get this error:  
ERR: Seems you use a node certificate which is also an admin certificate  
That may have worked with older Open Distro Security versions but it indicates  
a configuration error and is therefore forbidden now.

Ok, so can someone of the community send me a link / attach a documentation of how to generate a CLIENT certificate that fits the above script (running open distro 0.9 from aws). I am working at a company that uses ldap and I struggle making it work.  
Thank you so much!

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [May 16, 2019, 8:48am UTC](https://forum.search-guard.com/t/client-node-certificate/1503/2 "2019-05-16T08:48:17Z")

</div>

This is the Search Guard forum. For Open Distro related questions please refer to the Open Distro forum.

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [May 16, 2019, 8:56am UTC](https://forum.search-guard.com/t/client-node-certificate/1503/3 "2019-05-16T08:56:25Z")

</div>



---

<div class="post-metadata">

**Author:** ![steman](https://avatars.discourse-cdn.com/v4/letter/s/b9e5f3/32.png) [@steman](https://forum.search-guard.com/u/steman)\
**Post date:** [May 16, 2019, 10:33am UTC](https://forum.search-guard.com/t/client-node-certificate/1503/4 "2019-05-16T10:33:57Z")

</div>

Open Distro uses Search Guard.

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [June 6, 2019, 10:33am UTC](https://forum.search-guard.com/t/client-node-certificate/1503/5 "2019-06-06T10:33:58Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.