# SG Certificates are expiring, how to renew the SG Admin certificates **URL:** \ **Category:** Search Guard\ **Created:** [May 3, 2024, 2:07am UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503 "2024-05-03T02:07:08Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![amalk12](https://avatars.discourse-cdn.com/v4/letter/a/e9c0ed/32.png) [@amalk12](https://forum.search-guard.com/u/amalk12)\ **Post date:** [May 3, 2024, 2:07am UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/1 "2024-05-03T02:07:08Z")
If you think it is a bug report or you have a technical issue, please answer the following questions. For general questions, you can delete these questions. **Elasticsearch version:** 7.17.3 **Server OS version:** Windows 2019 **Kibana version (if relevant):** 7.17.3 **Browser version (if relevant):** **Browser OS version (if relevant):** **Describe the issue:** **Steps to reproduce:** 1. 2. 3. **Expected behavior:** **Provide configuration:** elasticsearch/config/elasticsearch.yml elasticsearch/plugins/search-guard-7/sgconfig/sg\_config.yml kibana/config/kibana.yml (if relevant) **Provide logs:** Elasticsearch Kibana (if relevant) **Screenshots (if relevant):** **Errors in browser console (if relevant):** **Additional data:** ---
**Author:** ![amalk12](https://avatars.discourse-cdn.com/v4/letter/a/e9c0ed/32.png) [@amalk12](https://forum.search-guard.com/u/amalk12)\ **Post date:** [May 8, 2024, 6:00am UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/2 "2024-05-08T06:00:25Z")
I am using the SG Community edition, can someone let me know the steps to renew the certificates for SG Admin and SG Client. Thank you ---
**Author:** ![mantas](https://avatars.discourse-cdn.com/v4/letter/m/7bcc69/32.png) [@mantas](https://forum.search-guard.com/u/mantas)\ **Post date:** [May 8, 2024, 8:37am UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/3 "2024-05-08T08:37:54Z")
Hi @amalk12, Have you tried using TLS Tool? You can see more info here: [https://docs.search-guard.com/latest/offline-tls-tool](https://docs.search-guard.com/latest/offline-tls-tool) Best, Mantas ---
**Author:** ![mantas](https://avatars.discourse-cdn.com/v4/letter/m/7bcc69/32.png) [@mantas](https://forum.search-guard.com/u/mantas)\ **Post date:** [May 8, 2024, 8:38am UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/4 "2024-05-08T08:38:52Z")
You might as well be interested in [https://docs.search-guard.com/latest/configuring-tls](https://docs.search-guard.com/latest/configuring-tls) ---
**Author:** ![amalk12](https://avatars.discourse-cdn.com/v4/letter/a/e9c0ed/32.png) [@amalk12](https://forum.search-guard.com/u/amalk12)\ **Post date:** [May 9, 2024, 7:54am UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/5 "2024-05-09T07:54:13Z")
thanks for the reply. will go through the docs. ---
**Author:** ![novaksam](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/novaksam/32/715_2.png) [@novaksam](https://forum.search-guard.com/u/novaksam)\ **Post date:** [May 9, 2024, 8:55pm UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/6 "2024-05-09T20:55:29Z")
I’ve had bad luck where the full CN of the cert changes between issuance, so I’ve added multiple admin cert CN’s over time. If the CN name just matches what you already have configured, you should be good to go without restarting. if you need to update cluster certs, you can do that in a rolling fashion; not sure if you need a restart, but I usually take the chance to upgrade my servers and stuff anyway. ---
**Author:** ![amalk12](https://avatars.discourse-cdn.com/v4/letter/a/e9c0ed/32.png) [@amalk12](https://forum.search-guard.com/u/amalk12)\ **Post date:** [May 14, 2024, 5:03am UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/7 "2024-05-14T05:03:32Z")
Thanks for your response. i will keep this in mind, while i am performing the certs upgrade. Thank you AK ---
**Author:** ![amalk12](https://avatars.discourse-cdn.com/v4/letter/a/e9c0ed/32.png) [@amalk12](https://forum.search-guard.com/u/amalk12)\ **Post date:** [May 17, 2024, 11:45am UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/8 "2024-05-17T11:45:48Z")
Hi , I have a question, where is the SG Admin and SG Client certificate located in the server. i have a SG installed on the windows servers. if some one can tell me the location where i can find these certs. Thanks ---
**Author:** ![amalk12](https://avatars.discourse-cdn.com/v4/letter/a/e9c0ed/32.png) [@amalk12](https://forum.search-guard.com/u/amalk12)\ **Post date:** [May 21, 2024, 12:20pm UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/9 "2024-05-21T12:20:57Z")
some one can help me with this question. Is there any default SG Admin and Client certificates installed on the machine, can anyone let me know about the location ---
**Author:** ![mantas](https://avatars.discourse-cdn.com/v4/letter/m/7bcc69/32.png) [@mantas](https://forum.search-guard.com/u/mantas)\ **Post date:** [May 21, 2024, 1:25pm UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/10 "2024-05-21T13:25:13Z")
Hi @amalk12, if you have Demo certificates installed you should see admin certs as per below: ```auto -cacert ../../elasticsearch-7.xx.xx/config/root-ca.pem -cert ../../elasticsearch-7.xx.xx/config/kirk.pem -key ../../elasticsearch-7.xx.xx/config/kirk-key.pem ``` You can also use the Search Guard TLS Tool to generate new certificates, please see more info here : [https://docs.search-guard.com/latest/offline-tls-tool](https://docs.search-guard.com/latest/offline-tls-tool) Please let me know if you need more guidance. Best, Mantas ---
**Author:** ![amalk12](https://avatars.discourse-cdn.com/v4/letter/a/e9c0ed/32.png) [@amalk12](https://forum.search-guard.com/u/amalk12)\ **Post date:** [May 23, 2024, 1:10pm UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/11 "2024-05-23T13:10:09Z")
Hi Mantas, i am getting a notification that my SG Admin Cert and SG Client cert is expiring , but unfortunately i am unable to find these certs in my elk yaml file. so trying to figure out where these certs are and if they need to be renewed or not. can i check which certs my SG is using currently … so i dont delete the existing certs ---
**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\ **Post date:** [June 18, 2024, 10:35am UTC](https://forum.search-guard.com/t/sg-certificates-are-expiring-how-to-renew-the-sg-admin-certificates/2503/14 "2024-06-18T10:35:59Z")
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.