Enable user to generate API Key and access API

Elastic Stack Elasticsearch
1

Hello. We are running ELK 7.6.2 stack.

I need to create a user and provide it access for API key generation along with API access.

When I check in Kibana console it says "API keys not enabled in Elasticsearch"

Please guide on where to start.

TIA

2

Do you have security enabled and configured elasticsearch to use HTTPS?

3

Hello and thanks.

No it uses http only.

During set up however i did run the certutil command and created elastic-certificates.p12 file for tls set up.

4

You need to enable https to use API Keys.

From the documentation.

When you are running in production mode, a bootstrap check prevents you from enabling the API key service unless you also enable TLS on the HTTP interface.

Follow this documentation to enable https.

5

Thanks. Looks like I enabled it in my configuration. The elasticsearch.yml contains:

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

Please guide

6

Please, check the documentation, it is explained there what you need to do.

You need to configure encryption in the http endpoint, you configured just in the transport endpoint.

7

Please upgrade, 7.6 is EOL and no longer supported.

8

I second on what @warkolm said., Please upgrade also because HTTPS is no longer required for API key since v7.16

9

Thanks. We will upgrade to a stable version 8.

Do you mean https is no longer required for
API key since version 7.16?

We are running 7.62 which is a later version.

10

The validation check if the https was enabled to allow the use of API Key was removed in 7.16 according to the release notes and this github commit.

So, if you want to use API Key without enabling HTTPS you need to upgrade to a version above 7.16, the ideal would be 7.17.7 so you would be able to use the upgrade assistant to check if you have any issue before upgrading to version 8.

There is no 7.62, you are running 7.6.2.

11

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.