# How to disable http security with xpack enabled

**URL:** <https://discuss.elastic.co/t/how-to-disable-http-security-with-xpack-enabled/248872>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [September 16, 2020, 6:26pm UTC](https://discuss.elastic.co/t/how-to-disable-http-security-with-xpack-enabled/248872 "2020-09-16T18:26:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![vamsikrishna\_medeti](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vamsikrishna_medeti/32/59108_2.png) [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\
**Post date:** [September 16, 2020, 6:26pm UTC](https://discuss.elastic.co/t/how-to-disable-http-security-with-xpack-enabled/248872/1 "2020-09-16T18:26:29Z")

</div>

Hi, I am setting up on-premise elastic stack with xpack enabled.  
As all the infrastructure is with in VPN, I would like to disable http security. But I am not able to use some features of xpack when http security is disabled. So, I am forced to enable http security.

And I had to configure the ca certificate in all the metricbeats to be able to communicate with elasticsearch. Is there any option to disable the ca certificate verification?

I tried with "xpack.security.http.ssl.client\_authentication: none", but no use.

---

<div class="post-metadata">

**Author:** ![Emanuil](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/emanuil/32/36783_2.png) [@Emanuil](https://discuss.elastic.co/u/Emanuil)\
**Post date:** [September 17, 2020, 1:47am UTC](https://discuss.elastic.co/t/how-to-disable-http-security-with-xpack-enabled/248872/2 "2020-09-17T01:47:05Z")

</div>

> [@vamsikrishna\_medeti](#):
>
> But I am not able to use some features of xpack when http security is disabled.

What would you like to use that you can't because of `xpack.security.enabled` being set to `false`?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 15, 2020, 1:47am UTC](https://discuss.elastic.co/t/how-to-disable-http-security-with-xpack-enabled/248872/3 "2020-10-15T01:47:13Z")

</div>

Closed on October 15, 2020, 1:47am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.