# Basic security Setup multi Node Cluster Query

**URL:** <https://discuss.elastic.co/t/basic-security-setup-multi-node-cluster-query/271232>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [April 26, 2021, 8:51am UTC](https://discuss.elastic.co/t/basic-security-setup-multi-node-cluster-query/271232 "2021-04-26T08:51:52Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Boris\_Joseph](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/boris_joseph/32/76499_2.png) [@Boris\_Joseph](https://discuss.elastic.co/u/Boris_Joseph)\
**Post date:** [April 26, 2021, 8:51am UTC](https://discuss.elastic.co/t/basic-security-setup-multi-node-cluster-query/271232/1 "2021-04-26T08:51:52Z")

</div>

Hi Elastic team,

Below reference indicates, that before proceeding with basic security, the minimal security steps must be completed for every node in the cluster.

 ![Basic Sec Excerpt](https://us1.discourse-cdn.com/elastic/original/3X/e/a/ea54d64abe892dbe3aff0c2b4c6fe3eb0ac413aa.png)

Does that mean we must bring down all ES nodes in same cluster (same cluster id) and run '_elasticsearch-setup-passwords interactive_' for every node (Data+Master+Coordinating)  
give all the same password for 'elastic' user?

Or would it be enough to bring down the Coordinating ES node alone (Which communicates with Kibana) and run '_elasticsearch-setup-passwords interactive_'?  
And will that apply user config, automatically to all nodes in the same cluster(same cluster id) with that Corodinating node, once its brought online?

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [April 28, 2021, 7:42am UTC](https://discuss.elastic.co/t/basic-security-setup-multi-node-cluster-query/271232/2 "2021-04-28T07:42:41Z")

</div>

No, you run `elasticsearch-setup-passwords` once for the whole cluster.

---

<div class="post-metadata">

**Author:** ![Boris\_Joseph](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/boris_joseph/32/76499_2.png) [@Boris\_Joseph](https://discuss.elastic.co/u/Boris_Joseph)\
**Post date:** [May 3, 2021, 4:55am UTC](https://discuss.elastic.co/t/basic-security-setup-multi-node-cluster-query/271232/3 "2021-05-03T04:55:34Z")

</div>

Thank you Tim!  
Also, is it necessary to have TLS between Elastic Nodes, before configuring users and roles via kibana?

---

<div class="post-metadata">

**Author:** ![Boris\_Joseph](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/boris_joseph/32/76499_2.png) [@Boris\_Joseph](https://discuss.elastic.co/u/Boris_Joseph)\
**Post date:** [May 6, 2021, 5:09am UTC](https://discuss.elastic.co/t/basic-security-setup-multi-node-cluster-query/271232/4 "2021-05-06T05:09:32Z")

</div>

Hi Tim/ElasticTeam

Can you quickly confirm if TLS encyrption between ElasticNodes is mandatory, before user and roles creation via Kibana?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 3, 2021, 5:09am UTC](https://discuss.elastic.co/t/basic-security-setup-multi-node-cluster-query/271232/5 "2021-06-03T05:09:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.