diff --git a/core/src/main/resources/org/elasticsearch/bootstrap/security.policy b/core/src/main/resources/org/elasticsearch/bootstrap/security.policy
index 51c66f9cc9e..89fcc5d57ba 100644
--- a/core/src/main/resources/org/elasticsearch/bootstrap/security.policy
+++ b/core/src/main/resources/org/elasticsearch/bootstrap/security.policy
@@ -101,4 +101,7 @@ grant {
 
   // needed by Mockito
   permission java.lang.RuntimePermission "reflectionFactoryAccess";
+
+  // needed to install SSLFactories, advanced SSL configuration, etc.
+  permission java.lang.RuntimePermission "setFactory";
 };