# Enroll Kibana using the Elasticsearch "\_security/enroll/kibana" API

**URL:** <https://discuss.elastic.co/t/enroll-kibana-using-the-elasticsearch-security-enroll-kibana-api/338117>\
**Category:** Kibana\
**Tags:** elastic-stack-security, docker\
**Created:** [July 11, 2023, 2:25pm UTC](https://discuss.elastic.co/t/enroll-kibana-using-the-elasticsearch-security-enroll-kibana-api/338117 "2023-07-11T14:25:08Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ANUBHAV\_GUPTA](https://avatars.discourse-cdn.com/v4/letter/a/7ea924/32.png) [@ANUBHAV\_GUPTA](https://discuss.elastic.co/u/ANUBHAV_GUPTA)\
**Post date:** [July 11, 2023, 2:25pm UTC](https://discuss.elastic.co/t/enroll-kibana-using-the-elasticsearch-security-enroll-kibana-api/338117/1 "2023-07-11T14:25:08Z")

</div>

Hi,  
I am generating an enrollment token using  
`curl -k https://username:password@address:9200/_security/enroll/kibana`

Now, If I am using the token in Kibana enrollment token pagafter starting, am getting error as:-

```auto
Enter a valid enrollment token.

```

I am using docker for running both elasticsearch and kibana on separate VMs.

thanks.

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [July 12, 2023, 11:44pm UTC](https://discuss.elastic.co/t/enroll-kibana-using-the-elasticsearch-security-enroll-kibana-api/338117/2 "2023-07-12T23:44:33Z")

</div>

> [@ANUBHAV\_GUPTA](#):
>
> Hi,  
> I am generating an enrollment token using  
> `curl -k https://username:password@address:9200/_security/enroll/kibana`

Hi,  
Did you mean you are generating an enrollment token to use in Kibana using [the `bin/elasticsearch-create-enrollment-token` command](https://www.elastic.co/guide/en/elasticsearch/reference/current/create-enrollment-token.html)?

If so, the command would look like:

```auto
bin/elasticsearch-create-enrollment-token -s kibana

```

Do I understand that your enrollment workflow only work when using `curl`, but not when you are using Kibana in the browser?

When using `curl`, does the connection go directly to a local instance in Docker? If so, does the `curl` command also work if you use the same hostname you're using in the browser?

---

<div class="post-metadata">

**Author:** ![ANUBHAV\_GUPTA](https://avatars.discourse-cdn.com/v4/letter/a/7ea924/32.png) [@ANUBHAV\_GUPTA](https://discuss.elastic.co/u/ANUBHAV_GUPTA)\
**Post date:** [July 13, 2023, 3:02am UTC](https://discuss.elastic.co/t/enroll-kibana-using-the-elasticsearch-security-enroll-kibana-api/338117/3 "2023-07-13T03:02:46Z")

</div>

hi @tsullivan ,  
I am not using `bin/elasticsearch-create-enrollment-token -s kibana` for enrollment token.  
I am trying to generate enrollment token using this api `curl -k https://username:password@address:9200/_security/enroll/kibana`

Am getting this as a response:-

> {"token":{"name":"enroll-process-token-1689217091241","value":"AAEAAWVsYXN0aWMva2liYW5hL2Vucm9sbC1wcm9jZXNzLXRva2VuLTE2ODkyMTcwOTEyNDE6RXRpYkRBNkRRQ2FaT0JXZWtKR3c5QQ"},"http\_ca":"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}

And when I am pasting this token value in the kibana page, then I get invalid token.  
Is the API `_security/enroll/kibana`` not used for enrolling kibana?  
Please enlighten me If I am missing something.

thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 10, 2023, 3:02am UTC](https://discuss.elastic.co/t/enroll-kibana-using-the-elasticsearch-security-enroll-kibana-api/338117/4 "2023-08-10T03:02:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.