# Is searchguard supports reading from elasticsearch-keystore?

**URL:** <https://forum.search-guard.com/t/is-searchguard-supports-reading-from-elasticsearch-keystore/1464>\
**Category:** Search Guard\
**Created:** [April 29, 2019, 10:49am UTC](https://forum.search-guard.com/t/is-searchguard-supports-reading-from-elasticsearch-keystore/1464 "2019-04-29T10:49:15Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ymohdriz](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/ymohdriz/32/1155_2.png) [@ymohdriz](https://forum.search-guard.com/u/ymohdriz)\
**Post date:** [April 29, 2019, 10:49am UTC](https://forum.search-guard.com/t/is-searchguard-supports-reading-from-elasticsearch-keystore/1464/1 "2019-04-29T10:49:16Z")

</div>

Hi team,

I stored the keystore/truststore passwords in elasticsearch-keystore tool. But searchguard is not able to read it from the elasticsearch-keystore tool.

Is searchguard supports reading from elasticsearch-keystore?

I don’t want to store the plain text passwords in elasticsearch.yml file and environment variable.

Thanks,  
Mohammed

---

<div class="post-metadata">

**Author:** ![cstaley](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/cstaley/32/463_2.png) [@cstaley](https://forum.search-guard.com/u/cstaley)\
**Post date:** [April 29, 2019, 11:54am UTC](https://forum.search-guard.com/t/is-searchguard-supports-reading-from-elasticsearch-keystore/1464/2 "2019-04-29T11:54:25Z")

</div>



---

<div class="post-metadata">

**Author:** ![cstaley](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/cstaley/32/463_2.png) [@cstaley](https://forum.search-guard.com/u/cstaley)\
**Post date:** [April 29, 2019, 11:59am UTC](https://forum.search-guard.com/t/is-searchguard-supports-reading-from-elasticsearch-keystore/1464/3 "2019-04-29T11:59:56Z")

</div>

No, it is not supported by Search Guard because it’s not really secure. And here is why:

“The elasticsearch keystore currently only provides obfuscation. In the future, password protection will be added.” ([Secure settings | Elasticsearch Guide [6.7] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/6.7/secure-settings.html))

So what real additional security do you gain from using elasticsearch-keystore?

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [May 20, 2019, 11:59am UTC](https://forum.search-guard.com/t/is-searchguard-supports-reading-from-elasticsearch-keystore/1464/4 "2019-05-20T11:59:57Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.