# Question Regarding Transmitting Password for client.key in Kibana SSL/TLS Setup

**URL:** <https://forum.search-guard.com/t/question-regarding-transmitting-password-for-client-key-in-kibana-ssl-tls-setup/2485>\
**Category:** Search Guard\
**Created:** [January 18, 2024, 7:14am UTC](https://forum.search-guard.com/t/question-regarding-transmitting-password-for-client-key-in-kibana-ssl-tls-setup/2485 "2024-01-18T07:14:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dafq](https://avatars.discourse-cdn.com/v4/letter/d/9de0a6/32.png) [@dafq](https://forum.search-guard.com/u/dafq)\
**Post date:** [January 18, 2024, 7:14am UTC](https://forum.search-guard.com/t/question-regarding-transmitting-password-for-client-key-in-kibana-ssl-tls-setup/2485/1 "2024-01-18T07:14:33Z")

</div>

Hello,

I am currently testing connecting to Kibana using Client certificates, as described in [Installing the Search Guard Kibana Plugin | Security for Elasticsearch | Search Guard](https://docs.search-guard.com/latest/kibana-plugin-installation#setting-up-ssltls). In this guide, I found the section where I need to input root-ca.pem, client.crt, and client.key as follows:

elasticsearch.ssl.certificateAuthorities: “/path/to/your/root-ca.pem”  
elasticsearch.ssl.certificate: “/path/to/your/client.crt”  
elasticsearch.ssl.key: “/path/to/your/client.key”

While I have located where to input root-ca.pem, client.crt, and client.key, I couldn’t find the part where I provide the password for client.key. How can I pass the password for client.key to Kibana?

Thank you always.

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/pablo/32/1443_2.png) [@pablo](https://forum.search-guard.com/u/pablo)\
**Post date:** [January 22, 2024, 9:45am UTC](https://forum.search-guard.com/t/question-regarding-transmitting-password-for-client-key-in-kibana-ssl-tls-setup/2485/2 "2024-01-22T09:45:41Z")

</div>

@dafq Please use `elasticsearch.ssl.keyPassphrase` to configure the private key password.

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [February 12, 2024, 9:46am UTC](https://forum.search-guard.com/t/question-regarding-transmitting-password-for-client-key-in-kibana-ssl-tls-setup/2485/3 "2024-02-12T09:46:38Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.