# Problem shield - kibana **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [February 4, 2016, 11:58am UTC](https://discuss.elastic.co/t/problem-shield-kibana/40954 "2016-02-04T11:58:05Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Massimo\_Carro](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@Massimo\_Carro](https://discuss.elastic.co/u/Massimo_Carro)\ **Post date:** [February 4, 2016, 11:58am UTC](https://discuss.elastic.co/t/problem-shield-kibana/40954/1 "2016-02-04T11:58:05Z")
Hi guys, I've configured elasticsearch to use shields and I'v create correctly a role and user for kibana4 to access to es. Next I've installed shield on Kibana but without ssl enabled, I received a fatal like this: {"type":"log","@timestamp":"2016-02-04T11:57:34+00:00","tags":["fatal"],"pid":8149,"level":"fatal","message":" **shield.encryptionKey is required in kibana.yml**.","error":{"message":"shield.encryptionKey is required in kibana.yml.","name":"Error","stack":"Error: shield.encryptionKey is required in kibana.yml.\n at ScopedPlugin.init [as externalInit] (/opt/kibana-4.4.0-linux-x64/installedPlugins/shield/index.js:36:59)\n at ScopedPlugin.tryCatcher (/opt/kibana-4.4.0-linux-x64/node\_modules/bluebird/js/main/util.js:26:23)\n at Promise.attempt.Promise.try (/opt/kibana-4.4.0-linux-x64/node\_modules/bluebird/js/main/method.js:30:24)\n at Object.register (/opt/kibana-4.4.0-linux-x64/src/server/plugins/Plugin.js:143:15)\n at /opt/kibana-4.4.0-linux-x64/node\_modules/hapi/lib/plugin.js:254:14\n at iterate (/opt/kibana-4.4.0-linux-x64/node\_modules/hapi/node\_modules/items/lib/index.js:35:13)\n at Object.exports.serial (/opt/kibana-4.4.0-linux-x64/node\_modules/hapi/node\_modules/items/lib/index.js:38:9)\n at [object Object].internals.Plugin.register (/opt/kibana-4.4.0-linux-x64/node\_modules/hapi/lib/plugin.js:236:11)\n at /opt/kibana-4.4.0-linux-x64/src/server/plugins/Plugin.js:150:32\n at tryCatcher (/opt/kibana-4.4.0-linux-x64/node\_modules/bluebird/js/main/util.js:26:23)\n at Promise.fromNode (/opt/kibana-4.4.0-linux-x64/node\_modules/bluebird/js/main/promise.js:164:30)\n at ScopedPlugin.init$ (/opt/kibana-4.4.0-linux-x64/src/server/plugins/Plugin.js:149:46)\n at tryCatch (/opt/kibana-4.4.0-linux-x64/node\_modules/babel-runtime/regenerator/runtime.js:67:40)\n at GeneratorFunctionPrototype.invoke [as \_invoke] (/opt/kibana-4.4.0-linux-x64/node\_modules/babel-runtime/regenerator/runtime.js:315:22)\n at GeneratorFunctionPrototype.prototype.(anonymous function) [as next] (/opt/kibana-4.4.0-linux-x64/node\_modules/babel-runtime/regenerator/runtime.js:100:21)\n at invoke (/opt/kibana-4.4.0-linux-x64/node\_modules/babel-runtime/regenerator/runtime.js:136:37)"}} How can I solve? Thanks a lot. Massimo ---
**Author:** ![terje](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@terje](https://discuss.elastic.co/u/terje)\ **Post date:** [February 5, 2016, 7:52am UTC](https://discuss.elastic.co/t/problem-shield-kibana/40954/2 "2016-02-05T07:52:31Z")
Set shield.encryptionKey in kibana.yml. See section 6b here: [https://www.elastic.co/guide/en/shield/current/kibana.html](https://www.elastic.co/guide/en/shield/current/kibana.html) ---
**Author:** ![Massimo\_Carro](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@Massimo\_Carro](https://discuss.elastic.co/u/Massimo_Carro)\ **Post date:** [February 5, 2016, 8:51am UTC](https://discuss.elastic.co/t/problem-shield-kibana/40954/3 "2016-02-05T08:51:46Z")
I've not configured to use ssl. If I insert shield.encryptionKey kibana ask me to insert info for ssl authentication, but I've not said kibana to use ssl and neither to elasticsearch. How can I check really that kibana doesn't use ssl? because seems that is use it...I'm just a bit confused ---
**Author:** ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)\ **Post date:** [February 5, 2016, 12:38pm UTC](https://discuss.elastic.co/t/problem-shield-kibana/40954/4 "2016-02-05T12:38:42Z")
It looks like our documentation is missing an important piece; The shield Kibana plugin requires SSL to be enabled, otherwise it will not work. I will open an issue so that we can get this clarified in the documentation. Edit: Please see step 5 on the page linked above for how to enable it. ---
**Author:** ![Massimo\_Carro](https://avatars.discourse-cdn.com/v4/letter/m/a8b319/32.png) [@Massimo\_Carro](https://discuss.elastic.co/u/Massimo_Carro)\ **Post date:** [February 5, 2016, 1:16pm UTC](https://discuss.elastic.co/t/problem-shield-kibana/40954/5 "2016-02-05T13:16:28Z")
Hi Jay, I'm working on create an ssl connection, I was arrived at this solution. Thanks a lot for your confirm. ---
**Author:** ![Hilal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hilal/32/7684_2.png) [@Hilal](https://discuss.elastic.co/u/Hilal)\ **Post date:** [March 22, 2016, 2:49pm UTC](https://discuss.elastic.co/t/problem-shield-kibana/40954/6 "2016-03-22T14:49:07Z")
I have same problem. Can you write your solution please? I couldn't do ssl connection. Thank you. ---
**Author:** ![bblank](https://avatars.discourse-cdn.com/v4/letter/b/f14d63/32.png) [@bblank](https://discuss.elastic.co/u/bblank)\ **Post date:** [April 27, 2016, 6:25pm UTC](https://discuss.elastic.co/t/problem-shield-kibana/40954/7 "2016-04-27T18:25:52Z")
Buggers. Now I have to set up SSL in my lab... ---
**Author:** ![stefan.stroebel](https://avatars.discourse-cdn.com/v4/letter/s/90db22/32.png) [@stefan.stroebel](https://discuss.elastic.co/u/stefan.stroebel)\ **Post date:** [June 21, 2016, 3:56pm UTC](https://discuss.elastic.co/t/problem-shield-kibana/40954/8 "2016-06-21T15:56:26Z")
Amazing that it took me 2 and a half hours in June 2016 to figure out the shortcoming of your documentation you discovered in Feb. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:43pm UTC](https://discuss.elastic.co/t/problem-shield-kibana/40954/9 "2017-07-06T13:43:52Z")