# Activate x-pack **URL:** \ **Category:** Elasticsearch\ **Created:** [April 12, 2021, 3:07am UTC](https://discuss.elastic.co/t/activate-x-pack/269829 "2021-04-12T03:07:35Z")\ **Posts on this page:** 8\ **Page:** 2
**Author:** ![alipujaistopo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alipujaistopo/32/50791_2.png) [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Post date:** [April 15, 2021, 3:41am UTC](https://discuss.elastic.co/t/activate-x-pack/269829/22 "2021-04-15T03:41:11Z")
yes. but still error when i write `xpack.security.http.ssl.keystore.path` . i think this is more complete log ``` [2021-04-15T10:28:34,499][INFO][o.e.n.Node] [10.194.11.67] version[7.10.1], pid[20170], build[default/rpm/1c34507e66d7db1211f66f3513706fdf548736aa/2020-12-05T01:00:33.671820Z], OS[Linux/3.10.0-1127.el7.x86_64/amd64], JVM[AdoptOpenJDK/OpenJDK 64-Bit Server VM/15.0.1/15.0.1+9] [2021-04-15T10:28:34,516][INFO][o.e.n.Node] [10.194.11.67] JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true] [2021-04-15T10:28:34,516][INFO][o.e.n.Node] [10.194.11.67] JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -Xms1g, -Xmx1g, -XX:+UseG1GC, -XX:G1ReservePercent=25, -XX:InitiatingHeapOccupancyPercent=30, -Djava.io.tmpdir=/tmp/elasticsearch-1443309297933887382, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/var/log/elasticsearch/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -XX:MaxDirectMemorySize=536870912, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/etc/elasticsearch, -Des.distribution.flavor=default, -Des.distribution.type=rpm, -Des.bundled_jdk=true] [2021-04-15T10:28:36,579][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [aggs-matrix-stats] [2021-04-15T10:28:36,580][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [analysis-common] [2021-04-15T10:28:36,580][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [constant-keyword] [2021-04-15T10:28:36,580][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [flattened] [2021-04-15T10:28:36,580][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [frozen-indices] [2021-04-15T10:28:36,581][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [ingest-common] [2021-04-15T10:28:36,581][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [ingest-geoip] [2021-04-15T10:28:36,581][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [ingest-user-agent] [2021-04-15T10:28:36,581][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [kibana] [2021-04-15T10:28:36,581][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [lang-expression] [2021-04-15T10:28:36,581][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [lang-mustache] [2021-04-15T10:28:36,581][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [lang-painless] [2021-04-15T10:28:36,581][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [mapper-extras] [2021-04-15T10:28:36,582][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [mapper-version] [2021-04-15T10:28:36,582][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [parent-join] [2021-04-15T10:28:36,582][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [percolator] [2021-04-15T10:28:36,582][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [rank-eval] [2021-04-15T10:28:36,582][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [reindex] [2021-04-15T10:28:36,582][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [repositories-metering-api] [2021-04-15T10:28:36,582][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [repository-url] [2021-04-15T10:28:36,583][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [search-business-rules] [2021-04-15T10:28:36,583][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [searchable-snapshots] [2021-04-15T10:28:36,583][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [spatial] [2021-04-15T10:28:36,583][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [systemd] [2021-04-15T10:28:36,583][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [transform] [2021-04-15T10:28:36,583][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [transport-netty4] [2021-04-15T10:28:36,583][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [unsigned-long] [2021-04-15T10:28:36,583][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [vectors] [2021-04-15T10:28:36,584][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [wildcard] [2021-04-15T10:28:36,584][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-analytics] [2021-04-15T10:28:36,584][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-async] [2021-04-15T10:28:36,584][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-async-search] [2021-04-15T10:28:36,584][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-autoscaling] [2021-04-15T10:28:36,584][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-ccr] [2021-04-15T10:28:36,584][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-core] [2021-04-15T10:28:36,584][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-data-streams] [2021-04-15T10:28:36,584][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-deprecation] [2021-04-15T10:28:36,585][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-enrich] [2021-04-15T10:28:36,585][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-eql] [2021-04-15T10:28:36,585][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-graph] [2021-04-15T10:28:36,585][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-identity-provider] [2021-04-15T10:28:36,585][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-ilm] [2021-04-15T10:28:36,585][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-logstash] [2021-04-15T10:28:36,585][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-ml] [2021-04-15T10:28:36,585][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-monitoring] [2021-04-15T10:28:36,586][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-ql] [2021-04-15T10:28:36,586][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-rollup] [2021-04-15T10:28:36,586][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-security] [2021-04-15T10:28:36,586][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-sql] [2021-04-15T10:28:36,586][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-stack] [2021-04-15T10:28:36,586][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-voting-only-node] [2021-04-15T10:28:36,586][INFO][o.e.p.PluginsService] [10.194.11.67] loaded module [x-pack-watcher] [2021-04-15T10:28:36,587][INFO][o.e.p.PluginsService] [10.194.11.67] no plugins loaded [2021-04-15T10:28:36,628][INFO][o.e.e.NodeEnvironment] [10.194.11.67] using [1] data paths, mounts [[/var (/dev/mapper/rhel-var)]], net usable_space [13.5gb], net total_space [19.9gb], types [xfs] [2021-04-15T10:28:36,628][INFO][o.e.e.NodeEnvironment] [10.194.11.67] heap size [1gb], compressed ordinary object pointers [true] [2021-04-15T10:28:36,813][INFO][o.e.n.Node] [10.194.11.67] node name [10.194.11.67], node ID [Xu3toSe1QuCfHghvSMnTuw], cluster name [elasticsearch], roles [transform, master, remote_cluster_client, data, ml, data_content, data_hot, data_warm, data_cold, ingest] [2021-04-15T10:28:40,132][ERROR][o.e.b.Bootstrap] [10.194.11.67] Exception org.elasticsearch.ElasticsearchSecurityException: failed to load SSL configuration [xpack.security.transport.ssl] at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:528) ~[?:?] at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?] at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.(SSLService.java:142) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?] at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1] at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?] at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?] at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?] at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?] at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?] at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?] at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?] at org.elasticsearch.node.Node.(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.node.Node.(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) [elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) [elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) [elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) [elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) [elasticsearch-cli-7.10.1.jar:7.10.1] at org.elasticsearch.cli.Command.main(Command.java:90) [elasticsearch-cli-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) [elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) [elasticsearch-7.10.1.jar:7.10.1] ``` ---
**Author:** ![alipujaistopo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alipujaistopo/32/50791_2.png) [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Post date:** [April 15, 2021, 3:42am UTC](https://discuss.elastic.co/t/activate-x-pack/269829/23 "2021-04-15T03:42:00Z")
``` Caused by: org.elasticsearch.ElasticsearchException: failed to initialize SSL TrustManager at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:74) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?] at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?] ... 26 more Caused by: java.io.IOException: keystore password was incorrect at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2103) ~[?:?] at sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:220) ~[?:?] at java.security.KeyStore.load(KeyStore.java:1472) ~[?:?] at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:97) ~[?:?] at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:65) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?] at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?] ... 26 more Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption. at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2103) ~[?:?] at sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:220) ~[?:?] at java.security.KeyStore.load(KeyStore.java:1472) ~[?:?] at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:97) ~[?:?] at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:65) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?] at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?] ... 26 more [2021-04-15T10:28:40,139][ERROR][o.e.b.ElasticsearchUncaughtExceptionHandler] [10.194.11.67] uncaught exception in thread [main] org.elasticsearch.bootstrap.StartupException: ElasticsearchSecurityException[failed to load SSL configuration [xpack.security.transport.ssl]]; nested: ElasticsearchException[failed to initialize SSL TrustManager]; nested: IOException[keystore password was incorrect]; nested: UnrecoverableKeyException[failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.]; at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:174) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) ~[elasticsearch-cli-7.10.1.jar:7.10.1] at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) ~[elasticsearch-7.10.1.jar:7.10.1] Caused by: org.elasticsearch.ElasticsearchSecurityException: failed to load SSL configuration [xpack.security.transport.ssl] at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:528) ~[?:?] at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?] at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.(SSLService.java:142) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?] at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1] at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?] at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?] at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?] at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?] at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?] at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?] at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?] at org.elasticsearch.node.Node.(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.node.Node.(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1] ... 6 more Caused by: org.elasticsearch.ElasticsearchException: failed to initialize SSL TrustManager at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:74) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?] at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?] at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?] at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.(SSLService.java:142) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?] at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1] at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?] at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?] at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?] at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?] at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?] at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?] at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?] at org.elasticsearch.node.Node.(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.node.Node.(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1] ... 6 more Caused by: java.io.IOException: keystore password was incorrect at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2103) ~[?:?] at sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:220) ~[?:?] at java.security.KeyStore.load(KeyStore.java:1472) ~[?:?] at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:97) ~[?:?] at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:65) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?] at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?] at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?] at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.(SSLService.java:142) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?] at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1] at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?] at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?] at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?] at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?] at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?] at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?] at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?] at org.elasticsearch.node.Node.(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.node.Node.(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1] ... 6 more Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption. at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2103) ~[?:?] at sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:220) ~[?:?] at java.security.KeyStore.load(KeyStore.java:1472) ~[?:?] at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:97) ~[?:?] ``` here's the part 2 ---
**Author:** ![alipujaistopo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alipujaistopo/32/50791_2.png) [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Post date:** [April 15, 2021, 3:42am UTC](https://discuss.elastic.co/t/activate-x-pack/269829/24 "2021-04-15T03:42:44Z")
``` at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:65) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?] at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?] at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?] at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.(SSLService.java:142) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?] at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1] at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?] at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?] at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?] at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?] at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?] at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?] at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?] at org.elasticsearch.node.Node.(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.node.Node.(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1] ...t java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?] at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?] at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?] at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?] at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?] at org.elasticsearch.node.Node.(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.node.Node.(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1] ... 6 more Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption. at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2103) ~[?:?] at sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:220) ~[?:?] at java.security.KeyStore.load(KeyStore.java:1472) ~[?:?] at org.elasticsearch.xpack.core.ssl.TrustConfig.getStore(TrustConfig.java:97) ~[?:?] at org.elasticsearch.xpack.core.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:65) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:437) ~[?:?] at java.util.HashMap.computeIfAbsent(HashMap.java:1224) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSSLConfigurations$5(SSLService.java:526) ~[?:?] at java.util.HashMap.forEach(HashMap.java:1425) ~[?:?] at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1521) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.loadSSLConfigurations(SSLService.java:524) ~[?:?] at org.elasticsearch.xpack.core.ssl.SSLService.(SSLService.java:142) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:455) ~[?:?] at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:288) ~[?:?] at org.elasticsearch.node.Node.lambda$new$15(Node.java:553) ~[elasticsearch-7.10.1.jar:7.10.1] at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?] at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1625) ~[?:?] at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?] at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?] at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?] at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?] at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?] at org.elasticsearch.node.Node.(Node.java:557) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.node.Node.(Node.java:289) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.1.jar:7.10.1] at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.1.jar:7.10.1] 6 more ``` and this the last part ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [April 15, 2021, 6:43am UTC](https://discuss.elastic.co/t/activate-x-pack/269829/25 "2021-04-15T06:43:01Z")
Did you see: > failed to load SSL configuration [xpack.security.transport.ssl]]; nested: ElasticsearchException[failed to initialize SSL TrustManager]; nested: IOException[keystore password was incorrect]; nested: UnrecoverableKeyException[failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption. ---
**Author:** ![alipujaistopo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alipujaistopo/32/50791_2.png) [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Post date:** [April 15, 2021, 7:31am UTC](https://discuss.elastic.co/t/activate-x-pack/269829/26 "2021-04-15T07:31:06Z")
yes David, then what should i do? ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [April 15, 2021, 9:42am UTC](https://discuss.elastic.co/t/activate-x-pack/269829/27 "2021-04-15T09:42:18Z")
I guess that something is wrong with that. > [@dadoonet](#): > > Such issues can arise if a bad key is used during decryption I don't have experience in that. So I'd recommend that you start from scratch again from that page: [Set up basic security for the Elastic Stack | Elasticsearch Guide [7.12] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.12/security-basic-setup.html#encrypt-internode-communication) And if any of the steps provided in the guide does not work for you, share the step and the detailed messages... ---
**Author:** ![alipujaistopo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alipujaistopo/32/50791_2.png) [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Post date:** [April 15, 2021, 10:15am UTC](https://discuss.elastic.co/t/activate-x-pack/269829/28 "2021-04-15T10:15:39Z")
ah okay i will start from scratch again. thanks anyway David ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 13, 2021, 10:15am UTC](https://discuss.elastic.co/t/activate-x-pack/269829/29 "2021-05-13T10:15:51Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed. [Previous page](https://discuss.elastic.co/t/activate-x-pack/269829.md?page=1)