# Using "xpack.security.enabled: true" on Windows

**URL:** <https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829>\
**Category:** Elasticsearch\
**Created:** [December 23, 2019, 10:09am UTC](https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829 "2019-12-23T10:09:14Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![JY\_DT](https://avatars.discourse-cdn.com/v4/letter/j/5e9695/32.png) [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\
**Post date:** [December 23, 2019, 10:09am UTC](https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829/1 "2019-12-23T10:09:14Z")

</div>

Hi,

I have ElasticSearch setup on a Windows Server, and I'm trying to use XPack security in a Basic version of the product.

I need to set this value in the elasticsearch.yml file on the Server,  
"xpack.security.enabled: true"

but I'm not sure where exactly in the file this should be placed. Should it just be placed at the end of the file? Also, I'm not using TLS, HTTPS, etc. - just basic authentication.

The Windows clients use Filebeat to send data to Elasticsearch.

Thanks in advance,  
Jy

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 23, 2019, 1:43pm UTC](https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829/2 "2019-12-23T13:43:08Z")

</div>

> [@JY\_DT](#):
>
> but I'm not sure where exactly in the file this should be placed. Should it just be placed at the end of the file?

Anywhere you like.

---

<div class="post-metadata">

**Author:** ![JY\_DT](https://avatars.discourse-cdn.com/v4/letter/j/5e9695/32.png) [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\
**Post date:** [December 24, 2019, 9:21am UTC](https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829/3 "2019-12-24T09:21:00Z")

</div>

OK, that works. But now I'm not able to bring up the Kibana UI in a browser using this:

[http://localhost:5601](http://localhost:5601)

It keeps giving me the message "Kibana server is not ready yet".  
I tried these steps:  
[https://www.elastic.co/guide/en/elasticsearch/reference/7.5/configuring-security.html](https://www.elastic.co/guide/en/elasticsearch/reference/7.5/configuring-security.html)

and set passwords for default users, and restarted the services (Elasticsearch, Kibana).

Like I said, I'm using only basic authentication, and not any encryption.

What could be going wrong in bringing up the Kibana UI with this? It was working fine earlier.

Thanks.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 24, 2019, 9:50am UTC](https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829/4 "2019-12-24T09:50:32Z")

</div>

It's super hard to know what is happening. You need to share your `elasticsearch.yml` file (Please [read this](https://discuss.elastic.co/t/about-the-elasticsearch-category/21) about how to format).

And the `kibana.yml` file as well.

And Elasticsearch logs.

---

<div class="post-metadata">

**Author:** ![JY\_DT](https://avatars.discourse-cdn.com/v4/letter/j/5e9695/32.png) [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\
**Post date:** [December 24, 2019, 10:35am UTC](https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829/5 "2019-12-24T10:35:33Z")

</div>

OK, sorry I had made some mistakes. I hadn't added these lines in kibana.yml:

elasticsearch.username: "kibana"  
elasticsearch.password: "my\_password"

and I've been following the steps mentioned here:  
[https://www.elastic.co/guide/en/elasticsearch/reference/7.5/security-getting-started.html](https://www.elastic.co/guide/en/elasticsearch/reference/7.5/security-getting-started.html)

I'm able to proceed now. Will post again if I face any issues.

Thanks again.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 21, 2020, 10:35am UTC](https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829/6 "2020-01-21T10:35:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.