# Is a rolling update to enable security possible?
**URL:** https://discuss.elastic.co/t/is-a-rolling-update-to-enable-security-possible/305001
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [May 18, 2022, 12:32am UTC](https://discuss.elastic.co/t/is-a-rolling-update-to-enable-security-possible/305001 "2022-05-18T00:32:35Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@erik\_n](https://discuss.elastic.co/u/erik_n)
#### Post date: [May 18, 2022, 12:32am UTC](https://discuss.elastic.co/t/is-a-rolling-update-to-enable-security-possible/305001/1 "2022-05-18T00:32:35Z")
I'm nearly positive the answer is "no", but I wanted to ask!
I have several clusters currently at v7.17 that do not have authentication/tls/etc enabled. I would like to enable it, for obvious reasons, but they cannot be fully shut down. I had been somewhat hoping v8 would enable a rolling update to add security (though I can see how it would be very difficult), but from reading the docs that doesn't seem to be the case.
I can create new clusters and migrate, but if we could do it in place without a total shutdown that would be lovely.
Thanks!
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 18, 2022, 1:02am UTC](https://discuss.elastic.co/t/is-a-rolling-update-to-enable-security-possible/305001/2 "2022-05-18T01:02:54Z")
You can't sorry to say. TLS needs to be enabled on all nodes at the same time (or, from startup onwards for all nodes).
---
### Author:  [@Yang\_Wang](https://discuss.elastic.co/u/Yang_Wang)
#### Post date: [May 18, 2022, 4:27am UTC](https://discuss.elastic.co/t/is-a-rolling-update-to-enable-security-possible/305001/3 "2022-05-18T04:27:39Z")
What Mark said is correct. We have a [public issue](https://github.com/elastic/elasticsearch/issues/39531) for this feature. But the work has been put on hold because the benefit to cost ratio is rather low and we have many other priorities.
---
### Author:  [@erik\_n](https://discuss.elastic.co/u/erik_n)
#### Post date: [May 18, 2022, 7:10pm UTC](https://discuss.elastic.co/t/is-a-rolling-update-to-enable-security-possible/305001/4 "2022-05-18T19:10:28Z")
Thank you both! I definitely understand how non-trivial this functionality would be to implement and the cost:benefit choice being made. I'll watch the issue until the update becomes a must.
---
### Author:  [@hulaux](https://discuss.elastic.co/u/hulaux)
#### Post date: [May 19, 2022, 1:13pm UTC](https://discuss.elastic.co/t/is-a-rolling-update-to-enable-security-possible/305001/5 "2022-05-19T13:13:31Z")
Hello,
I do understand I cannot use Elasticsearch-setup-passwords in a unsecure production Elasticsearch 7.17 Cluster right now (public issue not a priority one).
However, did anybody succeed in using Elasticsearch-setup-passwords interactive with the same set of passwords on every node (while ignoring the warning) then activate TLS transport ?
I know some people turned each node into a single dev-mode cluster with data apart (so Elasticsearch-setup-passwords works fine) before reverting to a production-mode Cluster but I wonder if a simpler way is safe.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 19, 2022, 10:47pm UTC](https://discuss.elastic.co/t/is-a-rolling-update-to-enable-security-possible/305001/6 "2022-05-19T22:47:33Z")
Welcome to our community! 😃
Please start a new topic for your question.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 16, 2022, 10:48pm UTC](https://discuss.elastic.co/t/is-a-rolling-update-to-enable-security-possible/305001/7 "2022-06-16T22:48:06Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.