Creating an Elasticsearch Certificate

This procedure describes how to create a Elasticsearch certificate.

Before you begin

• Verify that the CA certificate and private key are available, as described in Creating a CA Certificate and Key.

Begin

Run one of the following:

• UNIX:

  em bmcpython $HOME/ctm_em/bin/generate_ssl_certificate.py generateCert --rootCert <ca_cert_path> --rootKey <ca_key_path> --outFolder <path_for_new_certificate> --certificateName <Elasticsearch_certificate_name> --subject "<subject for certificate>”

• Windows:

  bmcpython "%EM_HOME%\bin\generate_ssl_certificate.py" generateCert --rootCert <ca_cert_path> --rootKey <ca_key_path> --outFolder <path_for_new_certificate> --certificateName <Elasticsearch_certificate_name> --subject "<subject for certificate>"

  NOTE: Certificate CN must be the host name.

  EXAMPLE of Certificate Subject: /C=US/ST=Texas/L=Houston/O=BMC_Software_Ltd/CN=<hostname>