The search cluster requires an internal TLS certificate renewal to restore full operational state. All nodes must be stopped and restarted with refreshed certificates. Planned downtime: up to one hour.