From ee175f19f3095652039d8909b5a2c4edfcf639cc Mon Sep 17 00:00:00 2001 From: gchaps <33642766+gchaps@users.noreply.github.com> Date: Thu, 21 Nov 2019 11:01:52 -0800 Subject: [PATCH] [DOCS] Adds clarification ot encryption key setting (#51244) (#51325) --- docs/settings/security-settings.asciidoc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/settings/security-settings.asciidoc b/docs/settings/security-settings.asciidoc index 2ba1369369a6..b852d38c05dc 100644 --- a/docs/settings/security-settings.asciidoc +++ b/docs/settings/security-settings.asciidoc @@ -40,6 +40,8 @@ An arbitrary string of 32 characters or more that is used to encrypt credentials in a cookie. It is crucial that this key is not exposed to users of {kib}. By default, a value is automatically generated in memory. If you use that default behavior, all sessions are invalidated when {kib} restarts. +In addition, high-availability deployments of {kib} will behave unexpectedly +if this setting isn't the same for all instances of {kib}. `xpack.security.secureCookies`:: Sets the `secure` flag of the session cookie. The default value is `false`. It