# Elasticsearch keystore reloadable settings

**URL:** <https://discuss.elastic.co/t/elasticsearch-keystore-reloadable-settings/306546>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [June 7, 2022, 9:11am UTC](https://discuss.elastic.co/t/elasticsearch-keystore-reloadable-settings/306546 "2022-06-07T09:11:21Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dheeraj\_Lalwani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dheeraj_lalwani/32/99145_2.png) [@Dheeraj\_Lalwani](https://discuss.elastic.co/u/Dheeraj_Lalwani)\
**Post date:** [June 7, 2022, 9:11am UTC](https://discuss.elastic.co/t/elasticsearch-keystore-reloadable-settings/306546/1 "2022-06-07T09:11:22Z")

</div>

Hello  
we are using Elasticsearch 7.16.3 with ssl enabled.  
We have stored following settings in the Elasticsearch-keystore for that-

```auto
xpack.security.http.ssl.keystore.secure_password
xpack.security.http.ssl.truststore.secure_password
xpack.security.transport.ssl.keystore.secure_password
xpack.security.transport.ssl.truststore.secure_password

```

Whenever certificate password is changed then Elasticsearch-keystore still contains old password.  
I have tried with reloadable Elasticsearch security settings but it didn't work.

Please confirm, if there is a way to reload above security settings.

Many Thanks In Advance!!  
Regards  
Dheeraj

---

<div class="post-metadata">

**Author:** ![Yang\_Wang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yang_wang/32/48857_2.png) [@Yang\_Wang](https://discuss.elastic.co/u/Yang_Wang)\
**Post date:** [June 7, 2022, 10:11am UTC](https://discuss.elastic.co/t/elasticsearch-keystore-reloadable-settings/306546/2 "2022-06-07T10:11:56Z")

</div>

They are not reloadable. You have to restart the node for any changes to the `secure_password`.

---

<div class="post-metadata">

**Author:** ![Dheeraj\_Lalwani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dheeraj_lalwani/32/99145_2.png) [@Dheeraj\_Lalwani](https://discuss.elastic.co/u/Dheeraj_Lalwani)\
**Post date:** [June 7, 2022, 11:35am UTC](https://discuss.elastic.co/t/elasticsearch-keystore-reloadable-settings/306546/3 "2022-06-07T11:35:48Z")

</div>

Thanks a lot for the quick answer. Even restart doesn't refresh Elasticsearch-keystore.

---

<div class="post-metadata">

**Author:** ![Yang\_Wang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yang_wang/32/48857_2.png) [@Yang\_Wang](https://discuss.elastic.co/u/Yang_Wang)\
**Post date:** [June 7, 2022, 12:06pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore-reloadable-settings/306546/4 "2022-06-07T12:06:57Z")

</div>

> [@Dheeraj\_Lalwani](#):
>
> Even restart doesn't refresh Elasticsearch-keystore.

What do you mean by this? You need update the passwords stored in the keystore before they can be picked up by node restart.

---

<div class="post-metadata">

**Author:** ![Dheeraj\_Lalwani](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dheeraj_lalwani/32/99145_2.png) [@Dheeraj\_Lalwani](https://discuss.elastic.co/u/Dheeraj_Lalwani)\
**Post date:** [June 7, 2022, 1:23pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore-reloadable-settings/306546/5 "2022-06-07T13:23:52Z")

</div>

> [@Yang\_Wang](#):
>
> What do you mean by this? You need update the passwords stored in the keystore before they can be picked up by node restart.

I thought password will be updated automatically. Thanks a lot for your inputs.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2022, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore-reloadable-settings/306546/6 "2022-07-05T13:24:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.