You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have configured the fleet custom FQDN via the grid configuration elasticfleet > config > server > custom_fqdn.
However, the cert being shipped inside the so-elastic-agent_windows_amd64 doesn't update to include the custom FQDN's so when trying to install elastic agents on clients I get the following error
timestamp=2023-10-02T16:18:40.5766856+01:00 level=error message="Installation Progress" Context="Installing in non-interactive mode.{\"log.level\":\"info\",\"@timestamp\":\"2023-10-02T16:18:37.275+0100\",\"log.origin\":{\"file.name\":\"cmd/enroll_cmd.go\",\"file.line\":478},\"message\":\"Starting enrollment to URL: [https://fleet.mydomain.co.uk:443/\",\"ecs.version\":\"1.6.0\](https://fleet.mydomain.co.uk/%22,/%22ecs.version/%22:/%221.6.0/)"} Error: fail to enroll: fail to execute request to fleet-server: x509: certificate signed by unknown authority For help, please see our troubleshooting guide at https://www.elastic.co/guide/en/fleet/8.8/fleet-troubleshooting.html Error: enroll command failed with exit code: 1 For help, please see our troubleshooting guide at https://www.elastic.co/guide/en/fleet/8.8/fleet-troubleshooting.html " ErrorDetails="exit status 1"
I have tried running sudo salt-call state.highstate as I saw other people saying this regenerates certificates and I have also tried running sudo so-elastic-agent-gen-installers neither result in a client certificate that includes the fleet custom FQDN’s.
Any help or guidance would be really appreciated.
Thanks
Guidelines
I have read the above statement and can confirm my post is relevant to Security Onion 2.4.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
-
Version
2.4.0
Installation Method
Security Onion ISO image
Description
configuration
Installation Type
Distributed
Location
on-prem with Internet access
Hardware Specs
Exceeds minimum requirements
CPU
8
RAM
32
Storage for /
256
Storage for /nsm
1.3TB
Network Traffic Collection
tap
Network Traffic Speeds
1Gbps to 10Gbps
Status
Yes, all services on all nodes are running OK
Salt Status
No, there are no failures
Logs
No, there are no additional clues
Detail
Hi,
I have configured the fleet custom FQDN via the grid configuration elasticfleet > config > server > custom_fqdn.
However, the cert being shipped inside the so-elastic-agent_windows_amd64 doesn't update to include the custom FQDN's so when trying to install elastic agents on clients I get the following error
timestamp=2023-10-02T16:18:40.5766856+01:00 level=error message="Installation Progress" Context="Installing in non-interactive mode.{\"log.level\":\"info\",\"@timestamp\":\"2023-10-02T16:18:37.275+0100\",\"log.origin\":{\"file.name\":\"cmd/enroll_cmd.go\",\"file.line\":478},\"message\":\"Starting enrollment to URL: [https://fleet.mydomain.co.uk:443/\",\"ecs.version\":\"1.6.0\](https://fleet.mydomain.co.uk/%22,/%22ecs.version/%22:/%221.6.0/)"} Error: fail to enroll: fail to execute request to fleet-server: x509: certificate signed by unknown authority For help, please see our troubleshooting guide at https://www.elastic.co/guide/en/fleet/8.8/fleet-troubleshooting.html Error: enroll command failed with exit code: 1 For help, please see our troubleshooting guide at https://www.elastic.co/guide/en/fleet/8.8/fleet-troubleshooting.html " ErrorDetails="exit status 1"
I have tried running
sudo salt-call state.highstate
as I saw other people saying this regenerates certificates and I have also tried runningsudo so-elastic-agent-gen-installers
neither result in a client certificate that includes the fleet custom FQDN’s.Any help or guidance would be really appreciated.
Thanks
Guidelines
Beta Was this translation helpful? Give feedback.
All reactions