# PKI security realm lisence

**URL:** <https://discuss.elastic.co/t/pki-security-realm-lisence/273392>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [May 19, 2021, 11:01am UTC](https://discuss.elastic.co/t/pki-security-realm-lisence/273392 "2021-05-19T11:01:34Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Yang\_Wang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yang_wang/32/48857_2.png) [@Yang\_Wang](https://discuss.elastic.co/u/Yang_Wang)\
**Post date:** [May 19, 2021, 11:37am UTC](https://discuss.elastic.co/t/pki-security-realm-lisence/273392/2 "2021-05-19T11:37:40Z")

</div>

PKI realm is Gold+ license (look for `LDAP, PKI, Active Directory authentication` on the subscription page.

If all you need is two way SSL, i.e. mutual TLS or mTLS, you don't need PKI realm. mTLS is available with basic.

There are quite a few other posts that are for this topic, e.g.:

- [Mutual tls/ssl on elasticsearch](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/197768)
- [Mutual tls/ssl on elasticsearch](https://discuss.elastic.co/t/mutual-tls-ssl-on-elasticsearch/252502)  
And the relevant settings are:
- [Security settings in Elasticsearch | Elasticsearch Guide [7.x] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.x/security-settings.html#http-tls-ssl-settings)

---

_[View the full topic](https://discuss.elastic.co/t/pki-security-realm-lisence/273392)._