error of Installing wazuh 4.14 cluster

[Lanny]

Hi, following installation guide to install wazuh on 3 servers to form a cluster, after configure config.yml and prepare to install indexer, it shows the following error message

Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not  handshake: Error in the certificate verification.

current server information

ubuntu 24.04 LTS (Noble Numbat)

any idea?

[Lanny]

Hi,

  And also have the following error message while perfome

   bash wazuh-install.sh --wazuh-indexer node-1

ERROR: Cannot import Wazuh GPG key

Lanny 在 2026年3月8日 星期日上午11:23:23 [UTC+8] 的信中寫道：

[hasitha.u...@wazuh.com]

Hi Lanny,

For a 3-node Wazuh cluster, the certs are generated from config.yml, and the docs are explicit that the node address used later must be the same one that was used when the certificates were created. Wazuh says to use the same node address from config.yml in the indexer config, and the node name passed to wazuh-install.sh --wazuh-indexer must also match the one used in config.yml.
That usually means one of these is wrong:

• The node-1 name in config.yml does not match the name you used in bash wazuh-install.sh --wazuh-indexer node-1
  
• The IP or DNS name in config.yml does not match what the node is actually using.
• You generated wazuh-install-files.tar / wazuh-certificates.tar from an old or incorrect config.yml

https://documentation.wazuh.com/current/user-manual/wazuh-indexer-cluster/certificate-deployment.html

Let me know if you plan to install Wazuh central components on three different nodes or any other option?

I have tested that it's working fine on my end. Check the above details and try again from the beginning.

1. nodes:
2.  # Wazuh indexer nodes
3.   indexer:
4.     - name: node-1
5.       ip: "<indexer-node-ip>"
6.     #- name: node-2
7.     #  ip: "<indexer-node-ip>"
8.     #- name: node-3
9.     #  ip: "<indexer-node-ip>"
10.  
11.   # Wazuh server nodes
12.   # If there is more than one Wazuh server
13.   # node, each one must have a node_type
14.   server:
15.     - name: wazuh-1
16.       ip: "<wazuh-manager-ip>"
17.     #  node_type: master
18.     #- name: wazuh-2
19.     #  ip: "<wazuh-manager-ip>"
20.     #  node_type: worker
21.     #- name: wazuh-3
22.     #  ip: "<wazuh-manager-ip>"
23.     #  node_type: worker
24.  
25.   # Wazuh dashboard nodes
26.   dashboard:
27.     - name: dashboard
28.       ip: "<dashboard-node-ip>"

Replace <indexer-node-ip>, <wazuh-manager-ip>, and <dashboard-node-ip> according to your three servers and recreate the certificates. Make sure to use the same name you have used in the indexer: - name: node-1 in the config.yml to run the installation command: bash wazuh-install.sh --wazuh-indexer node-1

Ref: https://documentation.wazuh.com/current/installation-guide/wazuh-indexer/installation-assistant.html
Let me know the update on this.