# Different CA and trust stores for Node and admin certificate. **URL:** \ **Category:** Search Guard\ **Created:** [October 5, 2017, 4:03pm UTC](https://forum.search-guard.com/t/different-ca-and-trust-stores-for-node-and-admin-certificate/630 "2017-10-05T16:03:57Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![ihjaz\_Mohamed](https://avatars.discourse-cdn.com/v4/letter/i/bcef8e/32.png) [@ihjaz\_Mohamed](https://forum.search-guard.com/u/ihjaz_Mohamed)\ **Post date:** [October 5, 2017, 4:03pm UTC](https://forum.search-guard.com/t/different-ca-and-trust-stores-for-node-and-admin-certificate/630/1 "2017-10-05T16:03:57Z")
Hi, Is it possible to have node certificates signed by one CA and client/admin certificate signed by another CA? I already have a keystore and truststore for my server which I’m using for node certificate. I do not have a way to get another certificate signed by the same CA. So can I use a self signed CA and certificate signed by that CA as client/admin certificate? ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [October 10, 2017, 12:51pm UTC](https://forum.search-guard.com/t/different-ca-and-trust-stores-for-node-and-admin-certificate/630/2 "2017-10-10T12:51:47Z")
No, that is not possible. Since the client certificate is used for / allows complete access to the cluster, it has to be trusted by the (root and or intermediate) certificate in the truststore. > **···** > > On Thursday, October 5, 2017 at 6:03:57 PM UTC+2, ihjaz Mohamed wrote: > > > Hi, > > > Is it possible to have node certificates signed by one CA and client/admin certificate signed by another CA? > > > > > > I already have a keystore and truststore for my server which I’m using for node certificate. I do not have a way to get another certificate signed by the same CA. > > > > > > So can I use a self signed CA and certificate signed by that CA as client/admin certificate?