# Data at rest encryption. Is it coming for Elasticsearch?

**URL:** https://discuss.elastic.co/t/data-at-rest-encryption-is-it-coming-for-elasticsearch/48766
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [April 29, 2016, 4:58am UTC](https://discuss.elastic.co/t/data-at-rest-encryption-is-it-coming-for-elasticsearch/48766 "2016-04-29T04:58:23Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![ashrose](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@ashrose](https://discuss.elastic.co/u/ashrose)
#### Post date: [April 29, 2016, 4:58am UTC](https://discuss.elastic.co/t/data-at-rest-encryption-is-it-coming-for-elasticsearch/48766/1 "2016-04-29T04:58:23Z")

</div>

From my searching it appears that there is still no ability to encrypt "data at rest", only during communications. It has been mentioned that this is on the roadmap.

I am referring to on-premise hosting of Elasticsearch, not cloud based.

Is this still on the roadmap? If so, any indication of when it may come along?

---

<div class="post-metadata">

### Author: ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)
#### Post date: [April 29, 2016, 1:10pm UTC](https://discuss.elastic.co/t/data-at-rest-encryption-is-it-coming-for-elasticsearch/48766/2 "2016-04-29T13:10:24Z")

</div>

Hi Ashley,

Encryption at rest is a feature on our security roadmap. We're currently chatting with customers and users about the detailed requirements. If you're familiar with the technical details of your requirements, can you share them?

cc @jaymode who will be interested in hearing as well.

Thanks,  
Steve

---

<div class="post-metadata">

### Author: ![Paul\_Targett](https://avatars.discourse-cdn.com/v4/letter/p/a698b9/32.png) [@Paul\_Targett](https://discuss.elastic.co/u/Paul_Targett)
#### Post date: [September 22, 2016, 4:00pm UTC](https://discuss.elastic.co/t/data-at-rest-encryption-is-it-coming-for-elasticsearch/48766/3 "2016-09-22T16:00:40Z")

</div>

Hi, what happened with this thread? We also have a requirement to have the data encrypted at rest. We provide SaaS into the health and social care sector and would like to use Elastic Search for search. Can provide more detail and interested in the current position.

@jaymode

---

<div class="post-metadata">

### Author: ![animageofmine](https://avatars.discourse-cdn.com/v4/letter/a/7feea3/32.png) [@animageofmine](https://discuss.elastic.co/u/animageofmine)
#### Post date: [March 29, 2017, 8:28pm UTC](https://discuss.elastic.co/t/data-at-rest-encryption-is-it-coming-for-elasticsearch/48766/4 "2017-03-29T20:28:22Z")

</div>

@skearns

+1 to this requirement.

---

<div class="post-metadata">

### Author: ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)
#### Post date: [March 30, 2017, 12:05am UTC](https://discuss.elastic.co/t/data-at-rest-encryption-is-it-coming-for-elasticsearch/48766/5 "2017-03-30T00:05:52Z")

</div>

We just [released 5.3.0](https://www.elastic.co/blog/elastic-stack-5-3-0-released).  
As of that release, we now support encryption at rest via _dm-crypt_.

If that does not suit your use-case, then pleas let us know your requirements so that we can consider them in our future roadmap.

---

<div class="post-metadata">

### Author: ![animageofmine](https://avatars.discourse-cdn.com/v4/letter/a/7feea3/32.png) [@animageofmine](https://discuss.elastic.co/u/animageofmine)
#### Post date: [March 30, 2017, 10:59pm UTC](https://discuss.elastic.co/t/data-at-rest-encryption-is-it-coming-for-elasticsearch/48766/6 "2017-03-30T22:59:51Z")

</div>

> [@TimV](#):
>
> dm-crypt

As far as I understand dm-crypt is disk level encryption.

What we are particularly looking for is to be able to encrypt each index using a key that our customers provide in order to be able to support data isolation. This helps us get more business from federal and other customers who want encryption enabled using their own encryption key.

Look forward to hearing from you soon.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:41pm UTC](https://discuss.elastic.co/t/data-at-rest-encryption-is-it-coming-for-elasticsearch/48766/7 "2017-07-06T13:41:16Z")

</div>


