# \[search-guard group\] Searchguard certificate configuration in distributed environment

**URL:** <https://forum.search-guard.com/t/search-guard-group-searchguard-certificate-configuration-in-distributed-environment/719>\
**Category:** Search Guard\
**Created:** [December 28, 2017, 12:36pm UTC](https://forum.search-guard.com/t/search-guard-group-searchguard-certificate-configuration-in-distributed-environment/719 "2017-12-28T12:36:39Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [December 28, 2017, 12:36pm UTC](https://forum.search-guard.com/t/search-guard-group-searchguard-certificate-configuration-in-distributed-environment/719/1 "2017-12-28T12:36:39Z")

</div>

maybe you want to start with our preconfigured Search Guard Bundle [GitHub - floragunncom/search-guard: Search Guard Plugin - Security for Elasticsearch](https://github.com/floragunncom/search-guard/wiki/Search-Guard-Bundle) ?

> **···**
>
> > Am 26.10.2017 um 08:58 schrieb sankar dunga \<sankardunga@gmail.com\>:
> > 
> > Hi All,
> > 
> > Below is my setup configurations  
> > \* Search Guard and Elasticsearch versions : 5.5 and 5.5  
> > \* JVM version : 1.8  
> > \* operating system version : Centos 6.5
> > 
> > There many discussions, still I'm not able to understand configuration of certificates in elasticsearch distributed environment.
> > 
> > I've 2 node setup i.e. 1 master and 1 node, I'm not able to configurare this setup with searchguard. Single node setup is working fine.  
> > I am generating certificates using below PKI scripts for single node setup.  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;gen\_root\_ca.sh capass changeit  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;gen\_client\_node\_cert.sh spock changeit capass
> > 
> > my questions are:  
> > -\> Which certificate we need to create for master node ?  
> > -\> Which certificate we need to create for Storage node ?  
> > -\> Do we need to copy any truststore key from master node to storage node ?  
> > -\> Does in requires any configuration changes in elasticsearch.yml ?
> > 
> > Please help me to configure searchguard in distributed environment.
> > 
> > Thanks  
> > Sankar
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/14b39c37-cb16-4e1f-a965-277bd73ac313%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/14b39c37-cb16-4e1f-a965-277bd73ac313%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).