# Is PKI authentication supported for Centralized Pipeline Management?

**URL:** <https://discuss.elastic.co/t/is-pki-authentication-supported-for-centralized-pipeline-management/182659>\
**Category:** Logstash\
**Created:** [May 24, 2019, 1:29pm UTC](https://discuss.elastic.co/t/is-pki-authentication-supported-for-centralized-pipeline-management/182659 "2019-05-24T13:29:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![marc-sensenich](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marc-sensenich/32/55090_2.png) [@marc-sensenich](https://discuss.elastic.co/u/marc-sensenich)\
**Post date:** [May 24, 2019, 1:29pm UTC](https://discuss.elastic.co/t/is-pki-authentication-supported-for-centralized-pipeline-management/182659/1 "2019-05-24T13:29:38Z")

</div>

I'm looking to use Centralized Pipeline Management in my Logstash deployments with PKI authentication to Elasticsearch. Here is a snippet from my Logstash environment configuration

```
xpack.management.enabled: "true"
xpack.management.elasticsearch.url: "${ELASTICSEARCH_HOST}:${ELASTICSEARCH_PORT}"
xpack.management.pipeline.id: ['ID']
xpack.management.elasticsearch.ssl.ca: "${ELASTICSEARCH_CA_FILE}"
xpack.management.elasticsearch.ssl.keystore.path: "${LOGSTASH_KEYSTORE}"
xpack.management.elasticsearch.ssl.keystore.password: "${LOGSTASH_KEYSTORE_PASSWORD_FILE}"

```

At runtime of Logstash, I am receiving the following error:

```
[2019-05-24T12:16:51,574][FATAL][logstash.runner] An unexpected error occurred! {:error=>#<ArgumentError: You must set the password using the "xpack.management.elasticsearch.password" in logstas
h.yml>, :backtrace=>["/usr/share/logstash/x-pack/lib/config_management/elasticsearch_source.rb:39:in `initialize'", "/usr/share/logstash/x-pack/lib/config_management/hooks.rb:41:in `after_bootstrap_checks
'", "org/logstash/execution/EventDispatcherExt.java:71:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:304:in `execute'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp
-0.6.5/lib/clamp/command.rb:67:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:237:in `run'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:132:
in `run'", "/usr/share/logstash/lib/bootstrap/environment.rb:73:in `<main>'"]}   

```

Is PKI authentication permitted for Centralized Pipeline Management? [The guard doesn't outline why this is not permitted](https://github.com/elastic/logstash/blob/9a78a6ce80880a0946956c384d8fc3f022d3b749/x-pack/lib/config_management/elasticsearch_source.rb#L37) and there is the [option to set the keystore in the configuration per the Logstash documentation](https://www.elastic.co/guide/en/logstash/current/configuring-centralized-pipelines.html). Is this to prevent users to use PKI authentication since there is an [open issue to switch over to a Kibana API](https://github.com/elastic/logstash/issues/9477) and Kibana does not support PKI authentication?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 21, 2019, 1:29pm UTC](https://discuss.elastic.co/t/is-pki-authentication-supported-for-centralized-pipeline-management/182659/2 "2019-06-21T13:29:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.