# Enable https on Elastic cluster node **URL:** \ **Category:** Elasticsearch\ **Created:** [April 11, 2024, 2:18pm UTC](https://discuss.elastic.co/t/enable-https-on-elastic-cluster-node/357222 "2024-04-11T14:18:45Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![vidyasagar862](https://avatars.discourse-cdn.com/v4/letter/v/59ef9b/32.png) [@vidyasagar862](https://discuss.elastic.co/u/vidyasagar862)\ **Post date:** [April 11, 2024, 2:18pm UTC](https://discuss.elastic.co/t/enable-https-on-elastic-cluster-node/357222/1 "2024-04-11T14:18:45Z")
I have three nodes cluster and i am using 8.11.4 version. I am trying to enable https on the each node , below is my configuration and when i access the cluster with https it is throwing ERR\_SSL\_PROTOCOL\_ERROR error , Please help xpack.security.enabled: false xpack.security.enrollment.enabled: false ingest.geoip.downloader.enabled: false xpack.security.http.ssl: enabled: true key: certs/private.key certificate: certs/certificate.pem certificate\_authorities: [certs/ca-chain.pem] xpack.security.transport.ssl: enabled: false ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [April 12, 2024, 6:03am UTC](https://discuss.elastic.co/t/enable-https-on-elastic-cluster-node/357222/3 "2024-04-12T06:03:39Z")
> [@vidyasagar862](#): > > when i access the cluster with https it is throwing ERR\_SSL\_PROTOCOL\_ERROR error Please show us exactly how you are trying to access the cluster, and the error message you receive. ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [April 12, 2024, 6:05am UTC](https://discuss.elastic.co/t/enable-https-on-elastic-cluster-node/357222/4 "2024-04-12T06:05:30Z")
> [@vidyasagar862](#): > > ```auto > xpack.security.enabled: false > > ``` You have explicitly turned off security. SSL is part of security so you cannot turn it on if you have disabled the security module. ---
**Author:** ![vidyasagar862](https://avatars.discourse-cdn.com/v4/letter/v/59ef9b/32.png) [@vidyasagar862](https://discuss.elastic.co/u/vidyasagar862)\ **Post date:** [April 12, 2024, 6:59am UTC](https://discuss.elastic.co/t/enable-https-on-elastic-cluster-node/357222/5 "2024-04-12T06:59:09Z")
![Screenshot 2024-04-12 122759](https://us1.discourse-cdn.com/elastic/original/3X/8/9/89d5baa67ae2d09372286d831818b2ff5f947df2.png) Thank you, Tim for the reply I am accessing one of the node with https from the browser as below It throwing error as "This site can't provide a secure connection. ERR\_SSL\_PROTOCAL\_ERROR" ---
**Author:** ![vidyasagar862](https://avatars.discourse-cdn.com/v4/letter/v/59ef9b/32.png) [@vidyasagar862](https://discuss.elastic.co/u/vidyasagar862)\ **Post date:** [April 12, 2024, 7:03am UTC](https://discuss.elastic.co/t/enable-https-on-elastic-cluster-node/357222/6 "2024-04-12T07:03:18Z")
I want to enable HTTPS without using all the security features. Can't I achieve this by enabling only `xpack.security.http.ssl: enabled: true` and disabling security with `xpack.security.enabled` ?" ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [April 12, 2024, 10:11am UTC](https://discuss.elastic.co/t/enable-https-on-elastic-cluster-node/357222/7 "2024-04-12T10:11:18Z")
> [@vidyasagar862](#): > > Can't I achieve this by enabling only `xpack.security.http.ssl: enabled: true` and disabling security with `xpack.security.enabled` ?" No, because `xpack.security.enabled: false` means _disable the security component of elasticsearch_ and the security component is what provides HTTPS. If you want SSL then you need to leave the security component enabled. You can enable [anonymous authentication](https://www.elastic.co/guide/en/elasticsearch/reference/8.11/anonymous-access.html) if you wish to bypass authentication (but we do not recommend that). But I have to ask, why do you want SSL if you don't want any other security features? Why encrypt network communications if you're leaving the whole server unprotected? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 10, 2024, 10:11am UTC](https://discuss.elastic.co/t/enable-https-on-elastic-cluster-node/357222/8 "2024-05-10T10:11:50Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.