# Elasticsearch upgrade 6.3 to 6.8 with security

**URL:** https://discuss.elastic.co/t/elasticsearch-upgrade-6-3-to-6-8-with-security/191433
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [July 19, 2019, 5:20pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-6-3-to-6-8-with-security/191433 "2019-07-19T17:20:00Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![adrianolimit](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adrianolimit/32/11930_2.png) [@adrianolimit](https://discuss.elastic.co/u/adrianolimit)
#### Post date: [July 19, 2019, 5:20pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-6-3-to-6-8-with-security/191433/1 "2019-07-19T17:20:00Z")

</div>

Hello,

I tried to upgrade my Elasticsearch cluster (4 nodes) from 6.3 to 6.8 and I failed. In my actual cluster (6.3), I don't have the security enable, in version 6.8 the security is free so I want to enable it. This is my Elasticsearch cluster topology :

- Node 1 : data/master node
- Node 2 : data/master node
- Node 3 : data/master node
- Node 4 : coordinating only node

This is my upgrade process ([based on Elastic documentation](https://www.elastic.co/guide/en/elasticsearch/reference/6.8/restart-upgrade.html)) :

1. **Disable shard allocation**
2. **Stop indexing and perform a synced flush**
3. **Shutdown all nodes**
4. **Start each upgraded node**
5. **Execute "elasticsearch-setup-passwords" commands to set the passwords for the built-in-users**

But, during the step 5 (elasticsearch-setup-passwords) I obtain this following error :

> Initiating the setup of passwords for reserved users elastic,apm\_system,kibana,logstash\_system,beats\_system,remote\_monitoring\_user.  
> You will be prompted to enter passwords as the process progresses.  
> Please confirm that you would like to continue [y/N]y  
> Enter password for [elastic]:  
> Reenter password for [elastic]:  
> ...  
> Reenter password for [remote\_monitoring\_user]:
> 
> **Connection failure to: [https://127.0.0.1:9200/\_xpack/security/user/apm\_system/\_password?pretty](https://127.0.0.1:9200/_xpack/security/user/apm_system/_password?pretty) failed: Read timed out**
> 
> **ERROR: Failed to set password for user [apm\_system].**

And, in my Elasticsearch node logs, I noticed this error :

> 2019-07-19T12:00:24,051][WARN][r.suppressed] [elastic\_node\_1] path: /\_xpack/security/user/apm\_system/\_password, params: {pretty=, username=apm\_system}  
> org.elasticsearch.action.UnavailableShardsException: [.security-6][0] [1] shardIt, [0] active : Timeout waiting for [1m], request: indices:data/write/update

I believe understand the error, maybe because I have disable shard allocation on my cluster and my cluster has yellow state. Why can I fix this problem?

Thank you in advance for your help.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 16, 2019, 5:20pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-6-3-to-6-8-with-security/191433/2 "2019-08-16T17:20:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
