Skip to content

Commit 2fd3a4e

Browse files
Update Configure SSL/TLS for self-managed Fleet Servers (#5514)
## Summary Updates the Elastic Defend callout on the **Configure SSL/TLS for self-managed Fleet Servers** page to reflect that Elastic Endpoint supports Elliptic Curve (EC) keys starting in 9.1, aligning with the Elastic Defend requirements update in #5344. Related to #1133 (comment). ## Generative AI disclosure <!-- To help us ensure compliance with the Elastic open source and documentation guidelines, please answer the following: --> 1. Did you use a generative AI (GenAI) tool to assist in creating this contribution? - [ ] Yes - [x] No <!-- 2. If you answered "Yes" to the previous question, please specify the tool(s) and model(s) used (e.g., Google Gemini, OpenAI ChatGPT-4, etc.). Tool(s) and model(s) used: -->
1 parent a056b9c commit 2fd3a4e

1 file changed

Lines changed: 7 additions & 1 deletion

File tree

reference/fleet/secure-connections.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,13 @@ Key passwords are not currently supported.
4040

4141

4242
::::{important}
43-
When you run {{agent}} with the {{elastic-defend}} integration, the [TLS certificates](https://en.wikipedia.org/wiki/X.509) used to connect to {{fleet-server}} and {{es}} need to be generated using [RSA](https://en.wikipedia.org/wiki/RSA_(cryptosystem)). For a full list of available algorithms to use when configuring TLS or mTLS, see [Configure SSL/TLS for standalone {{agents}}](/reference/fleet/elastic-agent-ssl-configuration.md). These settings are available for both standalone and {{fleet}}-managed {{agent}}.
43+
When you run {{agent}} with the {{elastic-defend}} integration, note the following TLS certificate requirements:
44+
45+
* {applies_to}`stack: ga 9.1+` The [TLS certificates](https://en.wikipedia.org/wiki/X.509) used to connect to {{fleet-server}} and {{es}} can use either [RSA](https://en.wikipedia.org/wiki/RSA_(cryptosystem)) or Elliptic Curve (EC) keys.
46+
47+
* {applies_to}`stack: ga =9.0` The TLS certificates used to connect to {{fleet-server}} and {{es}} need to be generated using RSA.
48+
49+
For a full list of available algorithms to use when configuring TLS or mTLS, refer to [Configure SSL/TLS for standalone {{agents}}](/reference/fleet/elastic-agent-ssl-configuration.md). These settings are available for both standalone and {{fleet}}-managed {{agent}}.
4450
::::
4551

4652

0 commit comments

Comments
 (0)