Migrating the Certificate Authority (CA) for Elasticsearch Service to Let’s Encrypt
Scheduled Maintenance Report for ESS (GovCloud)
Completed
The scheduled maintenance has been completed.
Posted Oct 27, 2021 - 23:26 UTC
Verifying
We have successfully migrated our TLS certificates to Let's Encrypt.
Posted Oct 27, 2021 - 01:12 UTC
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Oct 27, 2021 - 00:01 UTC
Scheduled
At Elastic Cloud we are committed to offering our customers the most secure way to run their workloads in the cloud. To help ensure this commitment, we are migrating our TLS certificates to Let’s Encrypt to best support sustainable and fully automated certificate management as our product offerings and available regions continue to expand.

These changes will begin rolling out on October 27, 2021.

What is the change?

We are migrating the TLS certificate on Elastic Cloud from DigiCert to Let’s Encrypt. The change in the Certification Authority (CA) might have an impact on some clients.

What is the impact on me?

If you use clients that are not compatible with the Let’s Encrypt ISRG Root X1 certificate, you must upgrade the clients or your certificate stores in order to trust the new certificates.

Find more details in our blog https://www.elastic.co/blog/migrating-ess-certs-letsencrypt
Posted Sep 15, 2021 - 04:09 UTC
This scheduled maintenance affected: AWS GovCloud US-East (aws-us-gov-east-1) (Elasticsearch connectivity: AWS aws-us-gov-east-1, Kibana connectivity: AWS aws-us-gov-east-1, APM connectivity: AWS aws-us-gov-east-1).