# Can not run elastic after add keystore **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [August 10, 2020, 6:31am UTC](https://discuss.elastic.co/t/can-not-run-elastic-after-add-keystore/244347 "2020-08-10T06:31:52Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![AayushPatel](https://avatars.discourse-cdn.com/v4/letter/a/da6949/32.png) [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\ **Post date:** [August 10, 2020, 6:31am UTC](https://discuss.elastic.co/t/can-not-run-elastic-after-add-keystore/244347/1 "2020-08-10T06:31:52Z")
Hi Recently trying to use elasticsearch keystore when I trying to restart elastic service when a new key added like "mypassword" to created elasticsearch.keystore, got a weird error ```auto Aug 10 10:08:04 debian elasticsearch[10961]: uncaught exception in thread [main] Aug 10 10:08:04 debian elasticsearch[10961]: java.lang.IllegalArgumentException: unknown secure setting [mypassword] please check that any required plugins are installed, or check the breaking changes documentation for removed settings Aug 10 10:08:04 debian elasticsearch[10961]: #011at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:532) Aug 10 10:08:04 debian elasticsearch[10961]: #011at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:477) Aug 10 10:08:04 debian elasticsearch[10961]: #011at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:448) Aug 10 10:08:04 debian elasticsearch[10961]: #011at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:419) ``` any help grateful ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [August 10, 2020, 6:36am UTC](https://discuss.elastic.co/t/can-not-run-elastic-after-add-keystore/244347/2 "2020-08-10T06:36:54Z")
Please share the full commands you ran and their output. ---
**Author:** ![AayushPatel](https://avatars.discourse-cdn.com/v4/letter/a/da6949/32.png) [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\ **Post date:** [August 10, 2020, 11:43am UTC](https://discuss.elastic.co/t/can-not-run-elastic-after-add-keystore/244347/3 "2020-08-10T11:43:06Z")
```auto /usr/share/elasticsearch/bin/elasticsearch-keystore add mypassword ``` to add a value to elasticsearch.keystore since I login as root then I type ```auto chown root:elasticsearch /etc/elasticsearch/elasticsearch.keystore chmod 660 /etc/elasticsearch/elasticsearch.keystore ``` after that, the above error appear ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [August 10, 2020, 1:05pm UTC](https://discuss.elastic.co/t/can-not-run-elastic-after-add-keystore/244347/4 "2020-08-10T13:05:12Z")
> [@AayushPatel](#): > > ```auto > /usr/share/elasticsearch/bin/elasticsearch-keystore add mypassword > > ``` There seems to be some confusion here. The Elasticsearch Keystore is not a general purpose container for secrets. It is an extension of the Elasticsearch configuration mechanism for settings that should be secret. Therefore, it can only be used to store specific values that Elasticsearch expects find there. Since `mypassword` is not a recognised setting in Elasticsearch, adding it to the keystore is an error. ---
**Author:** ![AayushPatel](https://avatars.discourse-cdn.com/v4/letter/a/da6949/32.png) [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\ **Post date:** [August 10, 2020, 7:08pm UTC](https://discuss.elastic.co/t/can-not-run-elastic-after-add-keystore/244347/5 "2020-08-10T19:08:34Z")
> [@AayushPatel](#): > > `elasticsearch-keystore add mypassword` do you have any reference? Can't find anything about it even here [https://www.elastic.co/guide/en/elasticsearch/reference/current/elasticsearch-keystore.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/elasticsearch-keystore.html) ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [August 10, 2020, 11:56pm UTC](https://discuss.elastic.co/t/can-not-run-elastic-after-add-keystore/244347/6 "2020-08-10T23:56:18Z")
That document is a command line reference. It explains how to use the tool. If you follow the [secure settings](https://www.elastic.co/guide/en/elasticsearch/reference/current/secure-settings.html) link at the top of that page you get to a reference on secure settings that says: > Only some settings are designed to be read from the keystore. However, the keystore has no validation to block unsupported settings. Adding unsupported settings to the keystore causes Elasticsearch to fail to start. ---
**Author:** ![AayushPatel](https://avatars.discourse-cdn.com/v4/letter/a/da6949/32.png) [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\ **Post date:** [August 31, 2020, 3:46am UTC](https://discuss.elastic.co/t/can-not-run-elastic-after-add-keystore/244347/7 "2020-08-31T03:46:47Z")
thanks ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 28, 2020, 3:46am UTC](https://discuss.elastic.co/t/can-not-run-elastic-after-add-keystore/244347/8 "2020-09-28T03:46:52Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.