# Should the bootstrap.password in Keystore be added on all nodes? **URL:** \ **Category:** Elasticsearch\ **Created:** [December 19, 2017, 3:55pm UTC](https://discuss.elastic.co/t/should-the-bootstrap-password-in-keystore-be-added-on-all-nodes/112469 "2017-12-19T15:55:18Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![ivten](https://avatars.discourse-cdn.com/v4/letter/i/58956e/32.png) [@ivten](https://discuss.elastic.co/u/ivten)\ **Post date:** [December 19, 2017, 3:55pm UTC](https://discuss.elastic.co/t/should-the-bootstrap-password-in-keystore-be-added-on-all-nodes/112469/1 "2017-12-19T15:55:18Z")
Stupid question but It is not clear from the documentation of Elasticsearch 6. Should bootstrap.password be added to the Keystore on only one of the nodes, only the master nodes or all of the nodes (or maybe the nodes from which I will authenticate using the stored password)? Can you tell me which of those is the right one? ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [December 20, 2017, 5:14am UTC](https://discuss.elastic.co/t/should-the-bootstrap-password-in-keystore-be-added-on-all-nodes/112469/2 "2017-12-20T05:14:45Z")
Well, it depends on exactly what you're trying to achieve, but you should only need to set it on the nodes against which you wish to authenticate. Why do you want to set it at all? Our recommendation is to just use the `setup-passwords` command. ---
**Author:** ![ivten](https://avatars.discourse-cdn.com/v4/letter/i/58956e/32.png) [@ivten](https://discuss.elastic.co/u/ivten)\ **Post date:** [December 20, 2017, 8:32am UTC](https://discuss.elastic.co/t/should-the-bootstrap-password-in-keystore-be-added-on-all-nodes/112469/3 "2017-12-20T08:32:08Z")
I'm setting up Elasticsearch cluster in automated way using an orchestration tool. To setup users, roles and passwords In ES version 5 I used a custom post-install script which was doing API calls doing the user/role/pass setup. This script was run after the cluster was setup and running. Now with ES version 6 I cannot use the changeme password anymore and therefore need to manually set the password for the elastic user in the Keystore. Then I can run a modified version of the post-install script again to setup the users and the roles. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 17, 2018, 8:32am UTC](https://discuss.elastic.co/t/should-the-bootstrap-password-in-keystore-be-added-on-all-nodes/112469/4 "2018-01-17T08:32:26Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.