# Support for Intermediate Certificate?

**URL:** <https://forum.search-guard.com/t/support-for-intermediate-certificate/2187>\
**Category:** Search Guard\
**Created:** [July 15, 2021, 9:08pm UTC](https://forum.search-guard.com/t/support-for-intermediate-certificate/2187 "2021-07-15T21:08:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![chintushah46](https://avatars.discourse-cdn.com/v4/letter/c/977dab/32.png) [@chintushah46](https://forum.search-guard.com/u/chintushah46)\
**Post date:** [July 15, 2021, 9:08pm UTC](https://forum.search-guard.com/t/support-for-intermediate-certificate/2187/1 "2021-07-15T21:08:47Z")

</div>

Does search-guard require to have client certificate generated from root certificate only or does it also support intermediate certificate as root certificate?

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [July 17, 2021, 7:50pm UTC](https://forum.search-guard.com/t/support-for-intermediate-certificate/2187/2 "2021-07-17T19:50:44Z")

</div>

Search Guard also supports client certificates signed by an intermediate certificate rather than a root CA. In that case, you need to provide the public key certificates of the root CA and all intermediate CAs so Search Guard can verify the entire certificate chain. You can combine the root and intermediate public certificates in one _.pem_ file for that.

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [August 7, 2021, 7:50pm UTC](https://forum.search-guard.com/t/support-for-intermediate-certificate/2187/3 "2021-08-07T19:50:45Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.