# How to disable X-Pack http basic auth keeping SSL?

**URL:** <https://discuss.elastic.co/t/how-to-disable-x-pack-http-basic-auth-keeping-ssl/123957>\
**Category:** Elasticsearch\
**Created:** [March 14, 2018, 5:01pm UTC](https://discuss.elastic.co/t/how-to-disable-x-pack-http-basic-auth-keeping-ssl/123957 "2018-03-14T17:01:37Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [March 14, 2018, 11:34pm UTC](https://discuss.elastic.co/t/how-to-disable-x-pack-http-basic-auth-keeping-ssl/123957/2 "2018-03-14T23:34:49Z")

</div>

> [@mglebka](#):
>
> What are the means to do this ?

You need to implement this by enabling anonymous access.

SSL is tied into the same feature setting as authentication, so you cannot enable SSL without also enabling authentication.

First, a warning:  
**Are you really sure you want to do this?**  
It seems quite strange to want to use the confidentiality and integrity features that SSL provides, but then have absolutely no authentication or access controls on your data.  
If you think you need `https`, then you should really consider enabling authentication as well.

Now, for enabling anonymous access, see here: [Action [cluster:monitor/main] is unauthorized for user - #2 by Turbo\_Fredriksson](https://discuss.elastic.co/t/action-cluster-monitor-main-is-unauthorized-for-user/119074/2)

---

_[View the full topic](https://discuss.elastic.co/t/how-to-disable-x-pack-http-basic-auth-keeping-ssl/123957)._