# Graylog Data Node 6.0.3 Certificate **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [June 27, 2024, 5:50pm UTC](https://community.graylog.org/t/graylog-data-node-6-0-3-certificate/32861 "2024-06-27T17:50:15Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![spardok](https://avatars.discourse-cdn.com/v4/letter/s/439d5e/32.png) [@spardok](https://community.graylog.org/u/spardok)\ **Post date:** [June 27, 2024, 5:50pm UTC](https://community.graylog.org/t/graylog-data-node-6-0-3-certificate/32861/1 "2024-06-27T17:50:16Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. **Don’t forget to select tags to help index your topic!** **1. Describe your incident:** I am getting yellow alerts on shards being unassigned and I want to see via the curl commands to the API what exactly is causing it but I don’t know where Graylog creates the certificate for GL Data Node. **2. Describe your environment:** - OS Information: ubuntu 22.04 LTS - Package Version: 6.0.3 via Docker Compose - Service logs, configurations, and environment variables: **3. What steps have you already taken to try and solve the problem?** **4. How can the community help?** If anyone knows what folder Graylog creates the Graylog Data Node certificate at. This is the certificate that is auto created by Graylog. **Helpful Posting Tips:** [Tips for Posting Questions that Get Answers](https://community.graylog.org/t/tips-for-posting-questions-that-get-answers/21828) [Hold down CTRL and link on link to open tips documents in a separate tab] ---
**Author:** ![doktormo](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/doktormo/32/10894_2.png) [@doktormo](https://community.graylog.org/u/doktormo)\ **Post date:** [July 9, 2024, 2:54pm UTC](https://community.graylog.org/t/graylog-data-node-6-0-3-certificate/32861/2 "2024-07-09T14:54:15Z")
@spardok In Graylog, you can go to System → Data Nodes → Configuration where you can generate a client certificate to be used for authenticating against the data node’s Opensearch. Alternatively, you can use the Graylog REST API which offers an endpoint proxying a subset of requests to the datanode’s Opensearch (`POST /datanodes/{hostname}/opensearch/{path: .*}`) . ---
**Author:** ![drewmiranda-gl](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/drewmiranda-gl/32/13376_2.png) [@drewmiranda-gl](https://community.graylog.org/u/drewmiranda-gl)\ **Post date:** [July 9, 2024, 4:52pm UTC](https://community.graylog.org/t/graylog-data-node-6-0-3-certificate/32861/3 "2024-07-09T16:52:18Z")
In case this is useful, here is our Documentation page on this topic: [https://go2docs.graylog.org/current/downloading\_and\_installing\_graylog/install\_graylog\_data\_node.htm](https://go2docs.graylog.org/current/downloading_and_installing_graylog/install_graylog_data_node.htm) This talks specifically about Creating a Client Certificate for Third-Party Tools (such as curl). ---
**Author:** ![spardok](https://avatars.discourse-cdn.com/v4/letter/s/439d5e/32.png) [@spardok](https://community.graylog.org/u/spardok)\ **Post date:** [July 15, 2024, 10:28pm UTC](https://community.graylog.org/t/graylog-data-node-6-0-3-certificate/32861/4 "2024-07-15T22:28:17Z")
Thank you both for the response. @doktormo the GUI creation of the certificate is exactly what I had done previously, and that is the cert that I want to use to authenticate against Opensearch, but I have no idea where that cert is stored so I don’t know what path to use when calling it. @drewmiranda-gl I see that the documentation has how to create the cert, including the way @doktormo suggested, but I do not see any indication of where that cert is then stored. ---
**Author:** ![drewmiranda-gl](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/drewmiranda-gl/32/13376_2.png) [@drewmiranda-gl](https://community.graylog.org/u/drewmiranda-gl)\ **Post date:** [July 16, 2024, 12:41pm UTC](https://community.graylog.org/t/graylog-data-node-6-0-3-certificate/32861/5 "2024-07-16T12:41:57Z")
When you click on the ‘Generate client certificate button’ ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/e/a/ea2bb258784fddc8f70c11c20b66ae15603fd8d4.png) a modal popup appears. ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/2/b/2bba9f76271bf628c902537eb3d92c5a8ef7e854.png) Once you click on ‘Create Certification’, the text of the certificates is shown: ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/e/5/e5f55653d075a2988e4b838c8a77542444d8cf66.png) The text of these certificates can be copy/pasted and saved into a text file. ---
**Author:** ![spardok](https://avatars.discourse-cdn.com/v4/letter/s/439d5e/32.png) [@spardok](https://community.graylog.org/u/spardok)\ **Post date:** [July 18, 2024, 9:38pm UTC](https://community.graylog.org/t/graylog-data-node-6-0-3-certificate/32861/6 "2024-07-18T21:38:18Z")
Well that explains that, I do not remember having to go through this when I did the initial set up for the first cert. Thank you. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [August 1, 2024, 9:39pm UTC](https://community.graylog.org/t/graylog-data-node-6-0-3-certificate/32861/7 "2024-08-01T21:39:13Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.