# Why xpack.ssl.key\_passphrase and xpack.ssl.secure\_key\_passphrase

**URL:** <https://discuss.elastic.co/t/why-xpack-ssl-key-passphrase-and-xpack-ssl-secure-key-passphrase/121281>\
**Category:** Elasticsearch\
**Created:** [February 23, 2018, 7:59pm UTC](https://discuss.elastic.co/t/why-xpack-ssl-key-passphrase-and-xpack-ssl-secure-key-passphrase/121281 "2018-02-23T19:59:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![m\_ebags](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/m_ebags/32/27205_2.png) [@m\_ebags](https://discuss.elastic.co/u/m_ebags)\
**Post date:** [February 23, 2018, 7:59pm UTC](https://discuss.elastic.co/t/why-xpack-ssl-key-passphrase-and-xpack-ssl-secure-key-passphrase/121281/1 "2018-02-23T19:59:05Z")

</div>

In the documentation ([https://www.elastic.co/guide/en/elasticsearch/reference/6.2/security-settings.html](https://www.elastic.co/guide/en/elasticsearch/reference/6.2/security-settings.html)) there are two settings (`xpack.ssl.key_passphrase` and `xpack.ssl.secure_key_passphrase`) that have exactly the same description. Can someone shed some light on these two settings and how they differ?

I am asking because I receive this warning while executing `setup-password.bat`.  
`12:09:29.127 [main] WARN org.elasticsearch.deprecation.common.settings.Settings - [key_passphrase] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaking changes documentation for the next major version.`

I have tried executing `setup-password.bat` with only `xpack.ssl.secure_key_passphrase` added to the keystore and it appears `setup-password.bat` does not / can not look at this setting. So my question is once `xpack.ssl.key_passphrase` is removed how are we suppose to be executing setup-password.bat? Should we be disabling ssl prior to executing setup-password.bat ?

Other Documentation:  
[https://www.elastic.co/guide/en/elasticsearch/reference/6.x/setup-passwords.html](https://www.elastic.co/guide/en/elasticsearch/reference/6.x/setup-passwords.html)  
[https://www.elastic.co/guide/en/x-pack/6.x/setting-up-authentication.html#set-built-in-user-passwords](https://www.elastic.co/guide/en/x-pack/6.x/setting-up-authentication.html#set-built-in-user-passwords)

---

<div class="post-metadata">

**Author:** ![rjernst](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rjernst/32/6363_2.png) [@rjernst](https://discuss.elastic.co/u/rjernst)\
**Post date:** [February 23, 2018, 8:12pm UTC](https://discuss.elastic.co/t/why-xpack-ssl-key-passphrase-and-xpack-ssl-secure-key-passphrase/121281/2 "2018-02-23T20:12:03Z")

</div>

> [@m\_ebags](#):
>
> it appears setup-password.bat does not / can not look at this setting

What behavior happens in this case? Can you give reproduction instructions?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 23, 2018, 8:12pm UTC](https://discuss.elastic.co/t/why-xpack-ssl-key-passphrase-and-xpack-ssl-secure-key-passphrase/121281/3 "2018-03-23T20:12:16Z")

</div>

Closed on March 23, 2018, 8:12pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.