Setting up the cluster's Elasticsearch instance » Securing the Elastic Stack

Securing the Elastic Stack

Configure TLS for communication between Elasticsearch and Kibana, and secure traffic on the HTTP interface for both Elasticsearch and Kibana.

This section contains the following topics:

Generating the required HTTP certificates
Use the Elasticsearch HTTP certificate tool elasticsearch-certutil to generate a dedicated HTTP certificate authority (CA) and a self-signed certificate for Elasticsearch and Kibana.
Installing the Elasticsearch Certificate Authority (CA)
Install the Elasticsearch CA in the Local Machine Trusted Root Certification Authorities certificate store.
Encrypting HTTP traffic between Kibana and Elasticsearch
Encryption and authentication between the Elasticsearch and Kibana applications may be implemented using an X.509 (CER) certificate exported from the Elasticsearch CA.
Verifying the security configuration
To check that the changes you have made to the keystore and Elasticsearch configuration have worked correctly, restart Elasticsearch and then connect to it in your browser to check its status.

« Installing and configuring Kibana

Generating the required HTTP certificates »

Contains proprietary and confidential information of ANSYS, Inc. and its subsidiaries and affiliates.

Release 2025 R2 - © ANSYS, Inc. All rights reserved