Updating the CA Certificate

This procedure describes how to update the CA certificate file by adding it to the Elasticsearch configuration.

Before you begin

• Verify that a new CA certificate is available, as described in Creating a CA Certificate and Key.

Begin

1. Place the CA certificate in one of the following Elasticsearch folders:
   • UNIX: $EM_HOME/ini/ssl/
   • Windows: %EM_HOME%\ini\ssl
2. In the Elasticsearch.yml file in the config folder, update the properties with the list of paths to CA certificates:
   • opendistro_security.ssl.transport.pemtrustedcas_filepath: certificates/elastic_ca.pem
   • opendistro_security.ssl.http.pemtrustedcas_filepath: certificates/elastic_ca.pem
3. Restart Elasticsearch.