2018-01-12 14:35:16 -05:00
|
|
|
[role="xpack"]
|
|
|
|
|
[[configuring-tls]]
|
|
|
|
|
=== Encrypting Communications in {es}
|
|
|
|
|
|
|
|
|
|
{security} enables you to encrypt traffic to, from, and within your {es} cluster.
|
|
|
|
|
Connections are secured using Transport Layer Security (TLS/SSL).
|
|
|
|
|
|
|
|
|
|
WARNING: Clusters that do not have encryption enabled send all data in plain text
|
|
|
|
|
including passwords and will not be able to install a license that enables {security}.
|
|
|
|
|
|
|
|
|
|
To enable encryption, you need to perform the following steps on each node in
|
|
|
|
|
the cluster:
|
|
|
|
|
|
2018-04-05 15:06:43 -04:00
|
|
|
. Verify that the `xpack.security.enabled` setting is `true`. For more
|
|
|
|
|
information, see <<security-settings>>.
|
2018-01-12 14:35:16 -05:00
|
|
|
|
|
|
|
|
. <<node-certificates, Generate a private key and X.509 certificate>>.
|
|
|
|
|
|
2018-02-15 14:41:01 -05:00
|
|
|
. Configure each node to:
|
|
|
|
|
.. Required: <<tls-transport,Enable TLS on the transport layer>>.
|
|
|
|
|
.. Recommended: <<tls-http,Enable TLS on the HTTP layer>>.
|
2018-01-12 14:35:16 -05:00
|
|
|
|
2018-05-01 12:15:13 -04:00
|
|
|
. If you are using Active Directory user authentication,
|
|
|
|
|
<<tls-active-directory,encrypt communications between {es} and your Active Directory server>>.
|
|
|
|
|
|
2018-01-12 14:35:16 -05:00
|
|
|
For more information about encrypting communications across the Elastic Stack,
|
|
|
|
|
see {xpack-ref}/encrypting-communications.html[Encrypting Communications].
|
|
|
|
|
|
|
|
|
|
include::node-certificates.asciidoc[]
|
2018-02-15 14:41:01 -05:00
|
|
|
include::tls-transport.asciidoc[]
|
|
|
|
|
include::tls-http.asciidoc[]
|
2018-05-01 12:15:13 -04:00
|
|
|
include::tls-ad.asciidoc[]
|
