anchor.diff:  [role="xpack"]
   [[configuring-tls-docker]]
  -=== Encrypting Communications in an {es} Docker Image
  +=== Encrypting Communications in an {es} Docker Container
   
   Starting with version 6.0.0, {security} (Gold, Platinum or Enterprise subscriptions) https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking-6.0.0-xes.html[requires SSL/TLS]
   encryption for the transport networking layer.
   
   This section demonstrates an easy path to get started with SSL/TLS for both
  -HTTPS and transport using the `elasticsearch-platinum` docker image.
  +HTTPS and transport using the {es} Docker image. The example uses
  +Docker Compose to manage the containers.
   
   For further details, please refer to
   {xpack-ref}/encrypting-communications.html[Encrypting Communications] and
  
positive.code:       - discovery.zen.minimum_master_nodes=2
        - ELASTIC_PASSWORD=$ELASTIC_PASSWORD <1>
        - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
        - xpack.security.http.ssl.enabled=true
        - xpack.security.transport.ssl.enabled=true
        - xpack.security.transport.ssl.verification_mode=certificate <2>
        - xpack.ssl.certificate_authorities=$CERTS_DIR/ca/ca.crt
        - xpack.ssl.certificate=$CERTS_DIR/es01/es01.crt
        - xpack.ssl.key=$CERTS_DIR/es01/es01.key
  
negative.code:       - localhost
      ip:
        - 127.0.0.1
  
    - name: es02
      dns:
        - es02
  