IT works for me. you have to change ownership. here is what I did
https://discuss.elastic.co/t/problem-on-elasticsearch-document/182093/2
cd /usr/share/elasticsearch/
bin/elasticsearch-certutil cert -out /etc/elasticsearch/config/elastic-certificates.p12 -pass ""
chown -R elasticsearch:elasticsearch /etc/elasticsearch/config
Add following line to /etc/elasticsearch/elasticsearch.yml
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: /etc/elasticsearch/config/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: /etc/elasticsearch/config/elastic-certificates.p12
Now kibana setup
On /etc/kibana/kibana.yml file following two line
elasticsearch.username: "kibana"
elasticsearch.password: "kibana"
xpack.security.enabled: true