# Username/password prompt 8.3.0

**URL:** https://discuss.elastic.co/t/username-password-prompt-8-3-0/308494
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [June 29, 2022, 4:09pm UTC](https://discuss.elastic.co/t/username-password-prompt-8-3-0/308494 "2022-06-29T16:09:33Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![GrahamMarval](https://avatars.discourse-cdn.com/v4/letter/g/8dc957/32.png) [@GrahamMarval](https://discuss.elastic.co/u/GrahamMarval)
#### Post date: [June 29, 2022, 4:09pm UTC](https://discuss.elastic.co/t/username-password-prompt-8-3-0/308494/1 "2022-06-29T16:09:34Z")

</div>

I apologise if this is the wrong place (and a daft question) but I have a question regarding ElasticSearch 8.3.0 and user password.

In previous versions, once I have installed the ElasticSearch service ("elasticsearch-service install" and ingest attachment, I could then go to localhost:9200 and download/view the JSON file with no issues.

Since installing 8.3.0, I am getting prompted for a username/password. Has something changed now so a username/password is required? If so, what username/password is it looking for? Have I missed a step in the install?

Thank you for your time.

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [June 29, 2022, 4:33pm UTC](https://discuss.elastic.co/t/username-password-prompt-8-3-0/308494/2 "2022-06-29T16:33:11Z")

</div>

Hi @GrahamMarval Welcome to the community and thanks for try 8.3.0

YES Elasticsearch is secure by default now and so yes there is a password and the endpoints are secured via SSL with Self Signed Certs

There is / was a blog on this [here](https://www.elastic.co/blog/introducing-simplified-elastic-stack-security)

And [here](https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-stack-security.html) are the docs on it

when you installed on the console you would have seen something like this...

```auto

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✅ Elasticsearch security features have been automatically configured!
✅ Authentication is enabled and cluster connections are encrypted.

ℹ️ Password for the elastic user (reset with `bin/elasticsearch-reset-password -u elastic`):
  P3XkuBjB30EpSqas8ZV5

ℹ️ HTTP CA certificate SHA-256 fingerprint:
  ec6a75c66e0952b695782dbea399b26cdea2714172e0655b48ec4805321c1d45

ℹ️ Configure Kibana to use this cluster:
• Run Kibana and click the configuration link in the terminal when Kibana starts.
• Copy the following enrollment token and paste it into Kibana in your browser (valid for the next 30 minutes):
  eyJ2ZXIiOiI4LjIuMyIsImFkciI6WyIxOTIuMTY4LjIuMTA3OjkyMDAiXSwiZmdyIjoiZWM2YTc1YzY2ZTA5NTJiNjk1NzgyZGJlYTM5OWIyNmNkZWEyNzE0MTcyZTA2NTViNDhlYzQ4MDUzMjFjMWQ0NSIsImtleSI6Il9vV1lvSUVCN1dqdWN6aHlpNTExOnhWbGVGTlNyUVkyRzFtNnJtdUJmVXcifQ==
  
ℹ️ Configure other nodes to join this cluster:
• On this node:
  ⁃ Create an enrollment token with `bin/elasticsearch-create-enrollment-token -s node`.
  ⁃ Uncomment the transport.host setting at the end of config/elasticsearch.yml.
  ⁃ Restart Elasticsearch.
• On other nodes:
  ⁃ Start Elasticsearch with `bin/elasticsearch --enrollment-token <token>`, using the enrollment token that you generated.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

```

now your curl would look like

`curl --cacert config/certs/http_ca.crt -u "elastic:password" https://localhost:9200`

or if you want to ingnore the ca check

`curl --insecure -u "elastic:password" https://localhost:9200`

---

<div class="post-metadata">

### Author: ![GrahamMarval](https://avatars.discourse-cdn.com/v4/letter/g/8dc957/32.png) [@GrahamMarval](https://discuss.elastic.co/u/GrahamMarval)
#### Post date: [June 29, 2022, 4:41pm UTC](https://discuss.elastic.co/t/username-password-prompt-8-3-0/308494/3 "2022-06-29T16:41:09Z")

</div>

Hi @stephenb

Thank you for clarifying. I knew I'd missed something in the install lol

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 27, 2022, 4:41pm UTC](https://discuss.elastic.co/t/username-password-prompt-8-3-0/308494/4 "2022-07-27T16:41:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.