# Enable SSL/TLS on Windows **URL:** \ **Category:** Elasticsearch\ **Created:** [February 14, 2017, 2:48pm UTC](https://discuss.elastic.co/t/enable-ssl-tls-on-windows/75058 "2017-02-14T14:48:34Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![mduckett1](https://avatars.discourse-cdn.com/v4/letter/m/f08c70/32.png) [@mduckett1](https://discuss.elastic.co/u/mduckett1)\ **Post date:** [February 14, 2017, 2:48pm UTC](https://discuss.elastic.co/t/enable-ssl-tls-on-windows/75058/1 "2017-02-14T14:48:34Z")
Hi, I've installed ELK 5.2 with x-pack and am currently trying to implement secure communication but can't seem to get it to work. I have followed [Setting Up TLS on a Cluster | X-Pack for the Elastic Stack [6.2] | Elastic](https://www.elastic.co/guide/en/x-pack/current/ssl-tls.html#installing-node-certificates) but when I restart the node the service will not start. I checked the logs and no indication of what's wrong, the service just gets stuck starting. [2017-02-14 13:39:27] [info] [3912] Starting service... If I comment out the extra config it works again, so i'm fairly sure its a configuration error: > xpack.ssl.key: C:\Path to key > xpack.ssl.certificate: c:\Path to Cert > xpack.ssl.certificate\_authorities: c:\Path to CA Cert > xpack.security.transport.ssl.enabled: true > xpack.security.http.ssl.enabled: true But I cant see where I have it wrong? ---
**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\ **Post date:** [February 14, 2017, 4:17pm UTC](https://discuss.elastic.co/t/enable-ssl-tls-on-windows/75058/2 "2017-02-14T16:17:09Z")
Did you try putting quotes around the paths? I think the extra ':' on the line could be throwing things off. ---
**Author:** ![mduckett1](https://avatars.discourse-cdn.com/v4/letter/m/f08c70/32.png) [@mduckett1](https://discuss.elastic.co/u/mduckett1)\ **Post date:** [February 15, 2017, 8:20am UTC](https://discuss.elastic.co/t/enable-ssl-tls-on-windows/75058/3 "2017-02-15T08:20:59Z")
Thanks jaymode, I had tried double quotes (as in the documentation it shows double quotes for the xpack.ssl.certificate\_authorities line) but this still didn't work. I've experimented a bit this morning and changing them all to single quotes appears to be working. So for clarity and if anyone else has a similar issue my config is now: > xpack.ssl.key: 'c:\Path to .key file' > xpack.ssl.certificate: 'c:\path to .crt file' > xpack.ssl.certificate\_authorities: ['c:\ path to ca.crt file'] > xpack.security.transport.ssl.enabled: true > xpack.security.http.ssl.enabled: true Thanks. ---
**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\ **Post date:** [February 15, 2017, 12:59pm UTC](https://discuss.elastic.co/t/enable-ssl-tls-on-windows/75058/4 "2017-02-15T12:59:43Z")
I am glad you've got it working and I'll see what we can do to get this documentation improved. ---
**Author:** ![mduckett1](https://avatars.discourse-cdn.com/v4/letter/m/f08c70/32.png) [@mduckett1](https://discuss.elastic.co/u/mduckett1)\ **Post date:** [February 15, 2017, 1:19pm UTC](https://discuss.elastic.co/t/enable-ssl-tls-on-windows/75058/5 "2017-02-15T13:19:04Z")
Thanks for your help 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 15, 2017, 1:19pm UTC](https://discuss.elastic.co/t/enable-ssl-tls-on-windows/75058/6 "2017-03-15T13:19:24Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.