# How elastic search support encryption of data at Rest

**URL:** <https://discuss.elastic.co/t/how-elastic-search-support-encryption-of-data-at-rest/249573>\
**Category:** Elasticsearch\
**Created:** [September 22, 2020, 6:06pm UTC](https://discuss.elastic.co/t/how-elastic-search-support-encryption-of-data-at-rest/249573 "2020-09-22T18:06:17Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vivek\_Sagar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_sagar/32/76044_2.png) [@Vivek\_Sagar](https://discuss.elastic.co/u/Vivek_Sagar)\
**Post date:** [September 22, 2020, 6:06pm UTC](https://discuss.elastic.co/t/how-elastic-search-support-encryption-of-data-at-rest/249573/1 "2020-09-22T18:06:18Z")

</div>

How does ES support encryption of data at Rest? I read in many prior discussions that it can be achieved by OS level encryption like dm-crypt which is supported in Elastic Search platinum subscription.  
**But still data will not be secure on a running VM as VM itself is responsible for decryption**... Is OS level encryption is best solution here or do we have any other option for this?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 22, 2020, 10:14pm UTC](https://discuss.elastic.co/t/how-elastic-search-support-encryption-of-data-at-rest/249573/2 "2020-09-22T22:14:57Z")

</div>

Welcome to our community! 😃

OS level encryption is the only supported option at this point.  
There are/were 3rd party solutions for encrypting data in indices that I saw some time ago, I can't comment on how well they work.

---

<div class="post-metadata">

**Author:** ![Vivek\_Sagar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_sagar/32/76044_2.png) [@Vivek\_Sagar](https://discuss.elastic.co/u/Vivek_Sagar)\
**Post date:** [September 23, 2020, 4:47am UTC](https://discuss.elastic.co/t/how-elastic-search-support-encryption-of-data-at-rest/249573/3 "2020-09-23T04:47:16Z")

</div>

Thank you Mark 😃 . Whether OS level encryption will not work in basic version? Or Is it like OS level Encryption will work in basic version as encryption/decryption is the responsibility of OS in this case, but we will not get any support from ES team in case of any issue? In order to get support from ES team we have to go with platinum subscription.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 23, 2020, 5:13am UTC](https://discuss.elastic.co/t/how-elastic-search-support-encryption-of-data-at-rest/249573/4 "2020-09-23T05:13:57Z")

</div>

It should work. There's just a specific config/approach that we have tested and directly support for our customers.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 21, 2020, 5:14am UTC](https://discuss.elastic.co/t/how-elastic-search-support-encryption-of-data-at-rest/249573/5 "2020-10-21T05:14:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.