# Enabled SSL for elasticsearch 8 docker using our own keystore and trustore

**URL:** <https://discuss.elastic.co/t/enabled-ssl-for-elasticsearch-8-docker-using-our-own-keystore-and-trustore/364371>\
**Category:** Elasticsearch\
**Tags:** docker\
**Created:** [August 5, 2024, 10:39am UTC](https://discuss.elastic.co/t/enabled-ssl-for-elasticsearch-8-docker-using-our-own-keystore-and-trustore/364371 "2024-08-05T10:39:39Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![cassper](https://avatars.discourse-cdn.com/v4/letter/c/5f9b8f/32.png) [@cassper](https://discuss.elastic.co/u/cassper)\
**Post date:** [August 5, 2024, 10:39am UTC](https://discuss.elastic.co/t/enabled-ssl-for-elasticsearch-8-docker-using-our-own-keystore-and-trustore/364371/1 "2024-08-05T10:39:39Z")

</div>

Hello,

This is my elasticseach.yaml and I am using ES 8.13 docker. I have my own keystore and trustore files.

```auto
cluster.name: "docker-cluster"
network.host: 0.0.0.0

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.http.ssl.enabled: true

xpack.security.http.ssl.keystore.path: ks.jks
xpack.security.http.ssl.keystore.secure_password: ""
xpack.security.http.ssl.truststore.path: truststore.jks
xpack.security.http.ssl.truststore.secure_password: ""

xpack.security.transport.ssl.keystore.path: ks.jks
xpack.security.transport.ssl.keystore.secure_key_password: ""
xpack.security.transport.ssl.truststore.path: truststore.jks
xpack.security.transport.ssl.truststore.password: ""

```

I am getting [xpack.security.http.ssl.keystore.secure\_password] is a secure setting and must be stored inside the Elasticsearch keystore, but was found inside elasticsearch.yml

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [August 5, 2024, 11:13am UTC](https://discuss.elastic.co/t/enabled-ssl-for-elasticsearch-8-docker-using-our-own-keystore-and-trustore/364371/2 "2024-08-05T11:13:59Z")

</div>

> [@cassper](#):
>
> I am getting [xpack.security.http.ssl.keystore.secure\_password] is a secure setting and must be stored inside the Elasticsearch keystore, but was found inside elasticsearch.yml

That message means exactly what it says.

> **[Secure settings | Elasticsearch Guide \[8.15\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/secure-settings.html)**