# Having issues with elasticsearch encryption

**URL:** <https://discuss.elastic.co/t/having-issues-with-elasticsearch-encryption/226821>\
**Category:** Elasticsearch\
**Tags:** license\
**Created:** [April 7, 2020, 5:25am UTC](https://discuss.elastic.co/t/having-issues-with-elasticsearch-encryption/226821 "2020-04-07T05:25:15Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![brb44](https://avatars.discourse-cdn.com/v4/letter/b/c6cbf5/32.png) [@brb44](https://discuss.elastic.co/u/brb44)\
**Post date:** [April 7, 2020, 5:25am UTC](https://discuss.elastic.co/t/having-issues-with-elasticsearch-encryption/226821/1 "2020-04-07T05:25:16Z")

</div>

I'm trying to enable encryption for elasticsearch cluster (3 nodes) and was able to do tls and http. when I turn on the xpack.security.enabled: true one node is asking for the authentication and other is not. License type is basic. Are there any additional steps I need to follow? Elasticsearch version I'm currently using is 6.5.1.  
When I try to Access [https://node1:9200/\_xpack/security/\_authenticate?pretty](https://node1:9200/_xpack/security/_authenticate?pretty) asks me for authentication and other node displays below message

{  
"error" : {  
"root\_cause" : [  
{  
"type" : "security\_exception",  
"reason" : "current license is non-compliant for [security]",  
"license.expired.feature" : "security"  
}  
],  
"type" : "security\_exception",  
"reason" : "current license is non-compliant for [security]",  
"license.expired.feature" : "security"  
},  
"status" : 403  
}

Please help me in getting this resolved.

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [April 7, 2020, 10:03am UTC](https://discuss.elastic.co/t/having-issues-with-elasticsearch-encryption/226821/2 "2020-04-07T10:03:12Z")

</div>

> [@brb44](#):
>
> License type is basic

The basic license includes security in 6.8.x and all versions from 7.1.0 onwards, but not in 6.5.1. The simplest fix is to upgrade.

---

<div class="post-metadata">

**Author:** ![brb44](https://avatars.discourse-cdn.com/v4/letter/b/c6cbf5/32.png) [@brb44](https://discuss.elastic.co/u/brb44)\
**Post date:** [April 7, 2020, 4:32pm UTC](https://discuss.elastic.co/t/having-issues-with-elasticsearch-encryption/226821/3 "2020-04-07T16:32:43Z")

</div>

David, Thanks for the quick response. another quick question, will transport ssl and http ssl come under the same security? or will these features still work without enabling xpack security?

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [April 7, 2020, 4:41pm UTC](https://discuss.elastic.co/t/having-issues-with-elasticsearch-encryption/226821/4 "2020-04-07T16:41:44Z")

</div>

I vaguely remember that using TLS on the network is independent of whether security is enabled, but I'm not sure of the details.

---

<div class="post-metadata">

**Author:** ![brb44](https://avatars.discourse-cdn.com/v4/letter/b/c6cbf5/32.png) [@brb44](https://discuss.elastic.co/u/brb44)\
**Post date:** [April 7, 2020, 4:43pm UTC](https://discuss.elastic.co/t/having-issues-with-elasticsearch-encryption/226821/5 "2020-04-07T16:43:58Z")

</div>

Ok. Is there documents we can follow or find the security features included in version 6.5.1?

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [April 7, 2020, 4:46pm UTC](https://discuss.elastic.co/t/having-issues-with-elasticsearch-encryption/226821/6 "2020-04-07T16:46:14Z")

</div>

Maybe [https://www.elastic.co/guide/en/elasticsearch/reference/6.5/ssl-tls.html](https://www.elastic.co/guide/en/elasticsearch/reference/6.5/ssl-tls.html) although I think these docs assume you're using all of security rather than just TLS so you might encounter problems. An upgrade is recommended, the 6.5.x series reaches the [end of its supported life](https://www.elastic.co/support/eol) in just over a month.

---

<div class="post-metadata">

**Author:** ![brb44](https://avatars.discourse-cdn.com/v4/letter/b/c6cbf5/32.png) [@brb44](https://discuss.elastic.co/u/brb44)\
**Post date:** [April 8, 2020, 3:41am UTC](https://discuss.elastic.co/t/having-issues-with-elasticsearch-encryption/226821/7 "2020-04-08T03:41:45Z")

</div>

Thanks for information @DavidTurner

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 6, 2020, 3:41am UTC](https://discuss.elastic.co/t/having-issues-with-elasticsearch-encryption/226821/8 "2020-05-06T03:41:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
