IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
Tutorial: Encrypting communications
editTutorial: Encrypting communications
editIn 6.0 and later releases, if you have a gold or higher license and the Elasticsearch security features are enabled, you must use Transport Layer Security (TLS) to encrypt internode communication. In this tutorial, you learn how to meet the minimum requirements to pass the TLS bootstrap check.
Single-node clusters that use a loopback interface do not have this requirement.
Before you begin
editIdeally, you should do this tutorial only after you complete the Getting started with the Elastic Stack and Getting started with security tutorials. At a minimum, you must:
-
Install and configure Elasticsearch and Kibana in a cluster with a single Elasticsearch node, as
described in
Getting started with the Elastic Stack. In
particular, this tutorial provides instructions that work with the
zip
andtar.gz
packages. - Install a trial license.
- Enable the Elasticsearch security features.
- Create passwords for built-in users.
- Add the built-in user to Kibana.
-
Stop Kibana. The method for starting and stopping Kibana varies depending on
how you installed it. For example, if you installed Kibana from an archive
distribution (
.tar.gz
or.zip
), stop it by enteringCtrl-C
on the command line. See Starting and stopping Kibana. -
Stop Elasticsearch. For example, if you installed Elasticsearch from an archive distribution,
enter
Ctrl-C
on the command line. See Stopping Elasticsearch.