# Password protect elasticsearch 7 cluster

**URL:** <https://discuss.elastic.co/t/password-protect-elasticsearch-7-cluster/182822>\
**Category:** Elasticsearch\
**Created:** [May 27, 2019, 1:37am UTC](https://discuss.elastic.co/t/password-protect-elasticsearch-7-cluster/182822 "2019-05-27T01:37:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hooman\_Bahreini](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hooman_bahreini/32/29500_2.png) [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\
**Post date:** [May 27, 2019, 1:37am UTC](https://discuss.elastic.co/t/password-protect-elasticsearch-7-cluster/182822/1 "2019-05-27T01:37:17Z")

</div>

I have installed elasticsearch 7 on Ubuntu. I have a basic licence. Now I want to password protect the cluster. I set `xpack.security.enabled: true` in `elasticsearch.yml` and run elasticsearch. And I get the following message:

> Transport SSL must be enabled if security is enabled on a [basic] license. Please set [xpack.security.transport.ssl.enabled] to [true] or disable security by setting [xpack.security.enabled]

Questions:

1. Is it possible to password protect the cluster without enabling SSL?
2. If I install SSL certificate on cluster nodes, would I also need to install SSL on my web server to communicate with elasticsearch?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 27, 2019, 3:02am UTC](https://discuss.elastic.co/t/password-protect-elasticsearch-7-cluster/182822/2 "2019-05-27T03:02:10Z")

</div>

It's _ **heaps** _ easier for people to assist you if you don't create so many threads around the same problem, and/or create a new topic and then just delete all the contents.

Let's carry on the conversation in this one - [Setting xpack.security.enabled = true](https://discuss.elastic.co/t/setting-xpack-security-enabled-true/182791/7)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 27, 2019, 3:02am UTC](https://discuss.elastic.co/t/password-protect-elasticsearch-7-cluster/182822/3 "2019-05-27T03:02:13Z")

</div>


