# Not able to generate TLS certificate

**URL:** <https://forum.search-guard.com/t/not-able-to-generate-tls-certificate/2322>\
**Category:** Search Guard\
**Created:** [June 6, 2022, 9:35am UTC](https://forum.search-guard.com/t/not-able-to-generate-tls-certificate/2322 "2022-06-06T09:35:35Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/pablo/32/1443_2.png) [@pablo](https://forum.search-guard.com/u/pablo)\
**Post date:** [June 8, 2022, 11:18am UTC](https://forum.search-guard.com/t/not-able-to-generate-tls-certificate/2322/2 "2022-06-08T11:18:59Z")

</div>

@jis Please try the below config instead. Please bear in mind that in `yml` files, correct indentation is crucial. All options under the `root:` and `intermediate` are at the same indent level.  
Also, you’ve duplicated `ca:` in your config.

```auto
ca:
   root:
      dn: CN=root.ca.Lxxxxxxx.uxxx.xxxx.x,OU=SSL,O=Test,DC=com

      keysize: 2048

      validityDays: 3650

      pkPassword: xxx-xx-password

      file: root-ca.pem

   intermediate:
      dn: CN=node1.Lxxxxxxx.uxxx.xxxx.x,OU=SSL,O=Test,DC=com

      keysize: 2048

      validityDays: 3650

      pkPassword: xxx-xx-password

      file: intermediate-ca.pem

```

---

_[View the full topic](https://forum.search-guard.com/t/not-able-to-generate-tls-certificate/2322)._