Docs
Elastic Stack Overview [6.6] » Securing the Elastic Stack » User authentication » PKI user authentication
«  Native user authentication     SAML authentication  »

PKI user authenticationedit

You can configure X-Pack security to use Public Key Infrastructure (PKI) certificates to authenticate users in Elasticsearch. This requires clients to present X.509 certificates.

Note

You cannot use PKI certificates to authenticate users in Kibana.

To use PKI in Elasticsearch, you configure a PKI realm, enable client authentication on the desired network layers (transport or http), and map the Distinguished Names (DNs) from the user certificates to X-Pack security roles in the role mapping file.

See Configuring a PKI realm.

PKI realm settingsedit

See PKI realm settings.

«  Native user authentication     SAML authentication  »