SG Certificates are expiring, replacing it with new certificates , do i need to initialize SG Again

Search Guard
1

If you think it is a bug report or you have a technical issue, please answer the following questions.

**Elasticsearch version:**7.17.3

Kibana version (if relevant): 7.17.3

Browser version (if relevant):

Describe the issue: I am replacing the SG Certs, do i need to re-initialize the SG

Steps to reproduce:
1.
2.
3.

Expected behavior:

Provide configuration:
elasticsearch/config/elasticsearch.yml
elasticsearch/plugins/search-guard-7/sgconfig/sg_config.yml
kibana/config/kibana.yml (if relevant)

Provide logs:
Elasticsearch
Kibana (if relevant)

Screenshots (if relevant):

Errors in browser console (if relevant):

2

HI @amalk12
No, you don’t have to initialize the SG plugin again. TLS certificates are not stored in the SG configuration.
TLS certificates are used to secure connection between the nodes (transport layer 9300-9400) and access to the cluster (HTTP 9200). TLS certificates are configurable only at the elasticsearch.yml and kibana.yml level.

The SG initialization is done only once and any further changes can be made with securityadmin.sh in SG Classic and sgctl.sh in SG FLX.