# failed to load plugin class \[com.floragunn.searchguard.SearchGuardPlugin\]

**URL:** <https://forum.search-guard.com/t/failed-to-load-plugin-class-com-floragunn-searchguard-searchguardplugin/1225>\
**Category:** Search Guard\
**Created:** [November 29, 2018, 10:50am UTC](https://forum.search-guard.com/t/failed-to-load-plugin-class-com-floragunn-searchguard-searchguardplugin/1225 "2018-11-29T10:50:07Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aleksei\_Saiko1](https://avatars.discourse-cdn.com/v4/letter/a/bb73d2/32.png) [@Aleksei\_Saiko1](https://forum.search-guard.com/u/Aleksei_Saiko1)\
**Post date:** [November 29, 2018, 10:50am UTC](https://forum.search-guard.com/t/failed-to-load-plugin-class-com-floragunn-searchguard-searchguardplugin/1225/1 "2018-11-29T10:50:07Z")

</div>

- **Search Guard and Elasticsearch version**

SG - 6.4.2-23.2

ES - 6.4.2

- **JVM version and operating system version**

java version “1.8.0\_162”

Java™ SE Runtime Environment (build 1.8.0\_162-b12)

Java HotSpot™ 64-Bit Server VM (build 25.162-b12, mixed mode)

NAME=“Ubuntu”

VERSION=“18.04.1 LTS (Bionic Beaver)”

ID=ubuntu

ID\_LIKE=debian

PRETTY\_NAME=“Ubuntu 18.04.1 LTS”

VERSION\_ID=“18.04”

- **Search Guard configuration files**

**config.yml**

> **···**
>
> **--------------**
> 
> ca:
> 
> root:
> 
> # The distinguished name of this CA. You must specify a distinguished name.
> 
> dn: CN=root.ca.pipl.pro,OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> pkPassword: xxxxxxxx
> 
> file: root-ca.pem
> 
> intermediate:
> 
> dn: CN=signing.ca.pipl.pro,OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> pkPassword: xxxxxxxxx
> 
> file: intermediate-ca.pem
> 
> defaults:
> 
> validityDays: 3650
> 
> pkPassword: auto
> 
> httpsEnabled: true
> 
> verifyHostnames: true
> 
> resolveHostnames: true
> 
> nodes:
> 
> - name: xxxxxxx-001.xxxxx.pro
> 
> dn: CN=es-k8s-001.pipl.pro,OU=IL,O=xxxx,L=IL,C=IL,DC=pro
> 
> dns: xxxxxxx-001.xxxxxxl.pro
> 
> - name: xxxxxxxx-002.xxxxxxx.pro
> 
> dn: CN=xxxxxxx-002.xxxxxx.pro,OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> dns: xxxxxx-002.xxxxx.pro
> 
> - name: node3
> 
> dn: CN=xxxxxxx-002.xxxxx.pro,OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> dns: xxxxxxx-003.xxxxxx.pro
> 
> clients:
> 
> - name: spock
> 
> dn: CN=spock.xxxxxx.pro,OU=IL,O=xxxxxxx,L=IL,C=IL,DC=pro
> 
> - name: kirk
> 
> dn: CN=kirk.xxxxxx.pro,OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> admin: true
> 
> **elasticsearch.yml**
> 
> **----------------------**
> 
> searchguard.ssl.transport.pemcert\_filepath: xxxxxxx-001.xxxxxxx.pro.pem
> 
> searchguard.ssl.transport.pemkey\_filepath: xxxxxxx-001.xxxxxx.pro.key
> 
> searchguard.ssl.transport.pemkey\_password: xxxxxxxxx
> 
> searchguard.ssl.transport.pemtrustedcas\_filepath: root-ca.pem
> 
> searchguard.ssl.transport.enforce\_hostname\_verification: true
> 
> searchguard.ssl.transport.resolve\_hostname: true
> 
> searchguard.ssl.http.enabled: false
> 
> searchguard.ssl.http.pemcert\_filepath: xxxxxxxx-001.xxxxxxx.pro\_http.pem
> 
> searchguard.ssl.http.pemkey\_filepath: xxxxxx.xxxxxx.pro\_http.key
> 
> searchguard.ssl.http.pemkey\_password: LUIL6RfUFAQL
> 
> searchguard.ssl.http.pemtrustedcas\_filepath: root-ca.pem
> 
> searchguard.nodes\_dn:
> 
> - CN=es-k8s-001.pipl.pro,OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> - CN=es-k8s-002.pipl.pro,OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> - CN=es-k8s-002.pipl.pro,OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> searchguard.authcz.admin\_dn:
> 
> - CN=kirk.pipl.pro,OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> “elasticsearch.yml” 195L, 6423C
> 
> - Elasticsearch log messages on debug level
> 
> [2018-11-29T10:29:15,389][ERROR][c.f.s.a.BackendRegistry] Not yet initialized (you may need to run sgadmin)
> 
> \*\*AFTER INITIALIZING \*\*
> 
> **----------------------**
> 
> WARNING: JAVA\_HOME not set, will use /usr/bin/java
> 
> Search Guard Admin v6
> 
> Will connect to localhost:9300 … done
> 
> ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]
> 
> Trace:
> 
> - Other installed Elasticsearch or Kibana plugins, if any
> 
> Kibana
> 
> Hello, I’m trying to work with search-guard for our data encryption.
> 
> I followed all the necessary steps of Installation from your page, and steps of generating the certificates from this page, by creating the root ca and intermediate ca - [https://search-guard.com/generating-certificates-tls-tool/](https://search-guard.com/generating-certificates-tls-tool/)
> 
> When trying to make the following step ( initialize search-guard) - ./sgadmin.sh -key ./kirk-key.pem -keypass 8Faq7qPtP1DH -cert ./kirk.pem -cacert ./root-ca.pem …
> 
> I receive the following error -
> 
> **WARNING: JAVA\_HOME not set, will use /usr/bin/java**
> 
> **Search Guard Admin v6**
> 
> **Will connect to localhost:9300 … done**
> 
> **ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**
> 
> **Trace:**
> 
> Could you please assist?
> 
> Thanks!
> 
> Aleksei

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [November 29, 2018, 11:21am UTC](https://forum.search-guard.com/t/failed-to-load-plugin-class-com-floragunn-searchguard-searchguardplugin/1225/2 "2018-11-29T11:21:18Z")

</div>

Hi,

can you please post the complete sgadmin.sh command with all paramters, and also post the complete stacktrace:

**ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**

**Trace:**

…

Thanks!

> **···**
>
> On Thursday, November 29, 2018 at 11:50:07 AM UTC+1, [aleksei.saiko@pipl.com](mailto:aleksei.saiko@pipl.com) wrote:
> 
> > 
> 
> > - **Search Guard and Elasticsearch version**
> 
> > SG - 6.4.2-23.2
> 
> > ES - 6.4.2
> 
> > 
> 
> > 
> 
> > - **JVM version and operating system version**
> 
> > java version “1.8.0\_162”
> 
> > Java™ SE Runtime Environment (build 1.8.0\_162-b12)
> 
> > Java HotSpot™ 64-Bit Server VM (build 25.162-b12, mixed mode)
> 
> > 
> 
> > 
> 
> > NAME=“Ubuntu”
> 
> > VERSION=“18.04.1 LTS (Bionic Beaver)”
> 
> > ID=ubuntu
> 
> > ID\_LIKE=debian
> 
> > PRETTY\_NAME=“Ubuntu 18.04.1 LTS”
> 
> > VERSION\_ID=“18.04”
> 
> > 
> 
> > 
> 
> > - **Search Guard configuration files**
> 
> > **config.yml**
> 
> > **--------------**
> 
> > ca:
> 
> > root:
> 
> > # The distinguished name of this CA. You must specify a distinguished name.
> 
> > dn: CN=[root.ca.pipl.pro](http://root.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > pkPassword: xxxxxxxx
> 
> > file: root-ca.pem
> 
> > intermediate:
> 
> > dn: CN=[signing.ca.pipl.pro](http://signing.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > pkPassword: xxxxxxxxx
> 
> > file: intermediate-ca.pem
> 
> > 
> 
> > 
> 
> > defaults:
> 
> > validityDays: 3650
> 
> > pkPassword: auto
> 
> > httpsEnabled: true
> 
> > verifyHostnames: true
> 
> > resolveHostnames: true
> 
> > 
> 
> > 
> 
> > 
> 
> > nodes:
> 
> > - name: [xxxxxxx-001.xxxxx.pro](http://xxxxxxx-001.xxxxx.pro)
> 
> > dn: CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxx,L=IL,C=IL,DC=pro
> 
> > dns: [xxxxxxx-001.xxxxxxl.pro](http://xxxxxxx-001.xxxxxxl.pro)
> 
> > - name: [xxxxxxxx-002.xxxxxxx.pro](http://xxxxxxxx-002.xxxxxxx.pro)
> 
> > dn: CN=[xxxxxxx-002.xxxxxx.pro](http://xxxxxxx-002.xxxxxx.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > dns: [xxxxxx-002.xxxxx.pro](http://xxxxxx-002.xxxxx.pro)
> 
> > - name: node3
> 
> > dn: CN=[xxxxxxx-002.xxxxx.pro](http://xxxxxxx-002.xxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > dns: [xxxxxxx-003.xxxxxx.pro](http://xxxxxxx-003.xxxxxx.pro)
> 
> > 
> 
> > 
> 
> > clients:
> 
> > - name: spock
> 
> > dn: CN=[spock.xxxxxx.pro](http://spock.xxxxxx.pro),OU=IL,O=xxxxxxx,L=IL,C=IL,DC=pro
> 
> > - name: kirk
> 
> > dn: CN=[kirk.xxxxxx.pro](http://kirk.xxxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > admin: true
> 
> > 
> 
> > 
> 
> > 
> 
> > **elasticsearch.yml**
> 
> > **----------------------**
> 
> > searchguard.ssl.transport.pemcert\_filepath: xxxxxxx-001.xxxxxxx.pro.pem
> 
> > searchguard.ssl.transport.pemkey\_filepath: xxxxxxx-001.xxxxxx.pro.key
> 
> > searchguard.ssl.transport.pemkey\_password: xxxxxxxxx
> 
> > searchguard.ssl.transport.pemtrustedcas\_filepath: root-ca.pem
> 
> > searchguard.ssl.transport.enforce\_hostname\_verification: true
> 
> > searchguard.ssl.transport.resolve\_hostname: true
> 
> > searchguard.ssl.http.enabled: false
> 
> > searchguard.ssl.http.pemcert\_filepath: xxxxxxxx-001.xxxxxxx.pro\_http.pem
> 
> > searchguard.ssl.http.pemkey\_filepath: xxxxxx.xxxxxx.pro\_http.key
> 
> > searchguard.ssl.http.pemkey\_password: LUIL6RfUFAQL
> 
> > searchguard.ssl.http.pemtrustedcas\_filepath: root-ca.pem
> 
> > searchguard.nodes\_dn:
> 
> > - CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > searchguard.authcz.admin\_dn:
> 
> > - CN=[kirk.pipl.pro](http://kirk.pipl.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > “elasticsearch.yml” 195L, 6423C
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > - Elasticsearch log messages on debug level
> 
> > [2018-11-29T10:29:15,389][ERROR][c.f.s.a.BackendRegistry] Not yet initialized (you may need to run sgadmin)
> 
> > 
> 
> > 
> 
> > \*\*AFTER INITIALIZING \*\*
> 
> > **----------------------**
> 
> > WARNING: JAVA\_HOME not set, will use /usr/bin/java
> 
> > Search Guard Admin v6
> 
> > Will connect to localhost:9300 … done
> 
> > ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]
> 
> > Trace:
> 
> > 
> 
> > 
> 
> > - Other installed Elasticsearch or Kibana plugins, if any
> 
> > Kibana
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > Hello, I’m trying to work with search-guard for our data encryption.
> 
> > I followed all the necessary steps of Installation from your page, and steps of generating the certificates from this page, by creating the root ca and intermediate ca - [https://search-guard.com/generating-certificates-tls-tool/](https://search-guard.com/generating-certificates-tls-tool/)
> 
> > 
> 
> > 
> 
> > When trying to make the following step ( initialize search-guard) - ./sgadmin.sh -key ./kirk-key.pem -keypass 8Faq7qPtP1DH -cert ./kirk.pem -cacert ./root-ca.pem …
> 
> > 
> 
> > 
> 
> > I receive the following error -
> 
> > **WARNING: JAVA\_HOME not set, will use /usr/bin/java**
> 
> > **Search Guard Admin v6**
> 
> > **Will connect to localhost:9300 … done**
> 
> > **ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**
> 
> > **Trace:**
> 
> > 
> 
> > 
> 
> > Could you please assist?
> 
> > 
> 
> > Thanks!
> 
> > 
> 
> > Aleksei
> 
> > 
> 
> >

---

<div class="post-metadata">

**Author:** ![Aleksei\_Saiko1](https://avatars.discourse-cdn.com/v4/letter/a/bb73d2/32.png) [@Aleksei\_Saiko1](https://forum.search-guard.com/u/Aleksei_Saiko1)\
**Post date:** [November 29, 2018, 11:52am UTC](https://forum.search-guard.com/t/failed-to-load-plugin-class-com-floragunn-searchguard-searchguardplugin/1225/3 "2018-11-29T11:52:14Z")

</div>

Hi Jochen, thx for your answer.

This is the full command, with the output , the Trace, is empty.

r **oot@xxxx-001:tools# ./sgadmin.sh -key ./kirk-key.pem -keypass xxxxxxxxx -cert ./kirk.pem -cacert ./root-ca.pem -nhnv -icl**

**WARNING: JAVA\_HOME not set, will use /usr/bin/java**

**Search Guard Admin v6**

**Will connect to localhost:9300 … done**

**ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**

**Trace:**

> **···**
>
> On Thursday, November 29, 2018 at 12:50:07 PM UTC+2, [alekse...@pipl.com](mailto:alekse...@pipl.com) wrote:
> 
> > 
> 
> > - **Search Guard and Elasticsearch version**
> 
> > SG - 6.4.2-23.2
> 
> > ES - 6.4.2
> 
> > 
> 
> > 
> 
> > - **JVM version and operating system version**
> 
> > java version “1.8.0\_162”
> 
> > Java™ SE Runtime Environment (build 1.8.0\_162-b12)
> 
> > Java HotSpot™ 64-Bit Server VM (build 25.162-b12, mixed mode)
> 
> > 
> 
> > 
> 
> > NAME=“Ubuntu”
> 
> > VERSION=“18.04.1 LTS (Bionic Beaver)”
> 
> > ID=ubuntu
> 
> > ID\_LIKE=debian
> 
> > PRETTY\_NAME=“Ubuntu 18.04.1 LTS”
> 
> > VERSION\_ID=“18.04”
> 
> > 
> 
> > 
> 
> > - **Search Guard configuration files**
> 
> > **config.yml**
> 
> > **--------------**
> 
> > ca:
> 
> > root:
> 
> > # The distinguished name of this CA. You must specify a distinguished name.
> 
> > dn: CN=[root.ca.pipl.pro](http://root.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > pkPassword: xxxxxxxx
> 
> > file: root-ca.pem
> 
> > intermediate:
> 
> > dn: CN=[signing.ca.pipl.pro](http://signing.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > pkPassword: xxxxxxxxx
> 
> > file: intermediate-ca.pem
> 
> > 
> 
> > 
> 
> > defaults:
> 
> > validityDays: 3650
> 
> > pkPassword: auto
> 
> > httpsEnabled: true
> 
> > verifyHostnames: true
> 
> > resolveHostnames: true
> 
> > 
> 
> > 
> 
> > 
> 
> > nodes:
> 
> > - name: [xxxxxxx-001.xxxxx.pro](http://xxxxxxx-001.xxxxx.pro)
> 
> > dn: CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxx,L=IL,C=IL,DC=pro
> 
> > dns: [xxxxxxx-001.xxxxxxl.pro](http://xxxxxxx-001.xxxxxxl.pro)
> 
> > - name: [xxxxxxxx-002.xxxxxxx.pro](http://xxxxxxxx-002.xxxxxxx.pro)
> 
> > dn: CN=[xxxxxxx-002.xxxxxx.pro](http://xxxxxxx-002.xxxxxx.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > dns: [xxxxxx-002.xxxxx.pro](http://xxxxxx-002.xxxxx.pro)
> 
> > - name: node3
> 
> > dn: CN=[xxxxxxx-002.xxxxx.pro](http://xxxxxxx-002.xxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > dns: [xxxxxxx-003.xxxxxx.pro](http://xxxxxxx-003.xxxxxx.pro)
> 
> > 
> 
> > 
> 
> > clients:
> 
> > - name: spock
> 
> > dn: CN=[spock.xxxxxx.pro](http://spock.xxxxxx.pro),OU=IL,O=xxxxxxx,L=IL,C=IL,DC=pro
> 
> > - name: kirk
> 
> > dn: CN=[kirk.xxxxxx.pro](http://kirk.xxxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > admin: true
> 
> > 
> 
> > 
> 
> > 
> 
> > **elasticsearch.yml**
> 
> > **----------------------**
> 
> > searchguard.ssl.transport.pemcert\_filepath: xxxxxxx-001.xxxxxxx.pro.pem
> 
> > searchguard.ssl.transport.pemkey\_filepath: xxxxxxx-001.xxxxxx.pro.key
> 
> > searchguard.ssl.transport.pemkey\_password: xxxxxxxxx
> 
> > searchguard.ssl.transport.pemtrustedcas\_filepath: root-ca.pem
> 
> > searchguard.ssl.transport.enforce\_hostname\_verification: true
> 
> > searchguard.ssl.transport.resolve\_hostname: true
> 
> > searchguard.ssl.http.enabled: false
> 
> > searchguard.ssl.http.pemcert\_filepath: xxxxxxxx-001.xxxxxxx.pro\_http.pem
> 
> > searchguard.ssl.http.pemkey\_filepath: xxxxxx.xxxxxx.pro\_http.key
> 
> > searchguard.ssl.http.pemkey\_password: LUIL6RfUFAQL
> 
> > searchguard.ssl.http.pemtrustedcas\_filepath: root-ca.pem
> 
> > searchguard.nodes\_dn:
> 
> > - CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > searchguard.authcz.admin\_dn:
> 
> > - CN=[kirk.pipl.pro](http://kirk.pipl.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > “elasticsearch.yml” 195L, 6423C
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > - Elasticsearch log messages on debug level
> 
> > [2018-11-29T10:29:15,389][ERROR][c.f.s.a.BackendRegistry] Not yet initialized (you may need to run sgadmin)
> 
> > 
> 
> > 
> 
> > \*\*AFTER INITIALIZING \*\*
> 
> > **----------------------**
> 
> > WARNING: JAVA\_HOME not set, will use /usr/bin/java
> 
> > Search Guard Admin v6
> 
> > Will connect to localhost:9300 … done
> 
> > ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]
> 
> > Trace:
> 
> > 
> 
> > 
> 
> > - Other installed Elasticsearch or Kibana plugins, if any
> 
> > Kibana
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > 
> 
> > Hello, I’m trying to work with search-guard for our data encryption.
> 
> > I followed all the necessary steps of Installation from your page, and steps of generating the certificates from this page, by creating the root ca and intermediate ca - [https://search-guard.com/generating-certificates-tls-tool/](https://search-guard.com/generating-certificates-tls-tool/)
> 
> > 
> 
> > 
> 
> > When trying to make the following step ( initialize search-guard) - ./sgadmin.sh -key ./kirk-key.pem -keypass 8Faq7qPtP1DH -cert ./kirk.pem -cacert ./root-ca.pem …
> 
> > 
> 
> > 
> 
> > I receive the following error -
> 
> > **WARNING: JAVA\_HOME not set, will use /usr/bin/java**
> 
> > **Search Guard Admin v6**
> 
> > **Will connect to localhost:9300 … done**
> 
> > **ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**
> 
> > **Trace:**
> 
> > 
> 
> > 
> 
> > Could you please assist?
> 
> > 
> 
> > Thanks!
> 
> > 
> 
> > Aleksei
> 
> > 
> 
> >

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [November 29, 2018, 12:31pm UTC](https://forum.search-guard.com/t/failed-to-load-plugin-class-com-floragunn-searchguard-searchguardplugin/1225/4 "2018-11-29T12:31:57Z")

</div>

That is strange. How did you install Search Guard? With the elasticsearch-plugin install command?

The layout should look like:

 ![sg_layout.png](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/8b522e9a7dfa019a8a3e66035f80dda65b9583a3.png)

Do you see the the search-guard-6-.jar in the plugins/search-guard-6 folder?

There is also an sgadmin standalone version that comes with all dependencies, can you try that?

[https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-6/6.4.2-23.2/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip](https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-6/6.4.2-23.2/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip)

> **···**
>
> On Thursday, November 29, 2018 at 12:52:15 PM UTC+1, [aleksei.saiko@pipl.com](mailto:aleksei.saiko@pipl.com) wrote:
> 
> > Hi Jochen, thx for your answer.
> 
> > This is the full command, with the output , the Trace, is empty.
> 
> > 
> 
> > r **oot@xxxx-001:tools# ./sgadmin.sh -key ./kirk-key.pem -keypass xxxxxxxxx -cert ./kirk.pem -cacert ./root-ca.pem -nhnv -icl**
> 
> > **WARNING: JAVA\_HOME not set, will use /usr/bin/java**
> 
> > **Search Guard Admin v6**
> 
> > **Will connect to localhost:9300 … done**
> 
> > **ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**
> 
> > **Trace:**
> 
> > 
> 
> > 
> 
> > On Thursday, November 29, 2018 at 12:50:07 PM UTC+2, [alekse...@pipl.com](mailto:alekse...@pipl.com) wrote:
> > 
> > >
> 
> > > - **Search Guard and Elasticsearch version**
> 
> > > SG - 6.4.2-23.2
> 
> > > ES - 6.4.2
> 
> > >
> 
> > >
> 
> > > - **JVM version and operating system version**
> 
> > > java version “1.8.0\_162”
> 
> > > Java™ SE Runtime Environment (build 1.8.0\_162-b12)
> 
> > > Java HotSpot™ 64-Bit Server VM (build 25.162-b12, mixed mode)
> 
> > >
> 
> > >
> 
> > > NAME=“Ubuntu”
> 
> > > VERSION=“18.04.1 LTS (Bionic Beaver)”
> 
> > > ID=ubuntu
> 
> > > ID\_LIKE=debian
> 
> > > PRETTY\_NAME=“Ubuntu 18.04.1 LTS”
> 
> > > VERSION\_ID=“18.04”
> 
> > >
> 
> > >
> 
> > > - **Search Guard configuration files**
> 
> > > **config.yml**
> 
> > > **--------------**
> 
> > > ca:
> 
> > > root:
> 
> > > # The distinguished name of this CA. You must specify a distinguished name.
> 
> > > dn: CN=[root.ca.pipl.pro](http://root.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > > pkPassword: xxxxxxxx
> 
> > > file: root-ca.pem
> 
> > > intermediate:
> 
> > > dn: CN=[signing.ca.pipl.pro](http://signing.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > > pkPassword: xxxxxxxxx
> 
> > > file: intermediate-ca.pem
> 
> > >
> 
> > >
> 
> > > defaults:
> 
> > > validityDays: 3650
> 
> > > pkPassword: auto
> 
> > > httpsEnabled: true
> 
> > > verifyHostnames: true
> 
> > > resolveHostnames: true
> 
> > >
> 
> > >
> 
> > >
> 
> > > nodes:
> 
> > > - name: [xxxxxxx-001.xxxxx.pro](http://xxxxxxx-001.xxxxx.pro)
> 
> > > dn: CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxx,L=IL,C=IL,DC=pro
> 
> > > dns: [xxxxxxx-001.xxxxxxl.pro](http://xxxxxxx-001.xxxxxxl.pro)
> 
> > > - name: [xxxxxxxx-002.xxxxxxx.pro](http://xxxxxxxx-002.xxxxxxx.pro)
> 
> > > dn: CN=[xxxxxxx-002.xxxxxx.pro](http://xxxxxxx-002.xxxxxx.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > dns: [xxxxxx-002.xxxxx.pro](http://xxxxxx-002.xxxxx.pro)
> 
> > > - name: node3
> 
> > > dn: CN=[xxxxxxx-002.xxxxx.pro](http://xxxxxxx-002.xxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > dns: [xxxxxxx-003.xxxxxx.pro](http://xxxxxxx-003.xxxxxx.pro)
> 
> > >
> 
> > >
> 
> > > clients:
> 
> > > - name: spock
> 
> > > dn: CN=[spock.xxxxxx.pro](http://spock.xxxxxx.pro),OU=IL,O=xxxxxxx,L=IL,C=IL,DC=pro
> 
> > > - name: kirk
> 
> > > dn: CN=[kirk.xxxxxx.pro](http://kirk.xxxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > admin: true
> 
> > >
> 
> > >
> 
> > >
> 
> > > **elasticsearch.yml**
> 
> > > **----------------------**
> 
> > > searchguard.ssl.transport.pemcert\_filepath: xxxxxxx-001.xxxxxxx.pro.pem
> 
> > > searchguard.ssl.transport.pemkey\_filepath: xxxxxxx-001.xxxxxx.pro.key
> 
> > > searchguard.ssl.transport.pemkey\_password: xxxxxxxxx
> 
> > > searchguard.ssl.transport.pemtrustedcas\_filepath: root-ca.pem
> 
> > > searchguard.ssl.transport.enforce\_hostname\_verification: true
> 
> > > searchguard.ssl.transport.resolve\_hostname: true
> 
> > > searchguard.ssl.http.enabled: false
> 
> > > searchguard.ssl.http.pemcert\_filepath: xxxxxxxx-001.xxxxxxx.pro\_http.pem
> 
> > > searchguard.ssl.http.pemkey\_filepath: xxxxxx.xxxxxx.pro\_http.key
> 
> > > searchguard.ssl.http.pemkey\_password: LUIL6RfUFAQL
> 
> > > searchguard.ssl.http.pemtrustedcas\_filepath: root-ca.pem
> 
> > > searchguard.nodes\_dn:
> 
> > > - CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > searchguard.authcz.admin\_dn:
> 
> > > - CN=[kirk.pipl.pro](http://kirk.pipl.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > “elasticsearch.yml” 195L, 6423C
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > > - Elasticsearch log messages on debug level
> 
> > > [2018-11-29T10:29:15,389][ERROR][c.f.s.a.BackendRegistry] Not yet initialized (you may need to run sgadmin)
> 
> > >
> 
> > >
> 
> > > \*\*AFTER INITIALIZING \*\*
> 
> > > **----------------------**
> 
> > > WARNING: JAVA\_HOME not set, will use /usr/bin/java
> 
> > > Search Guard Admin v6
> 
> > > Will connect to localhost:9300 … done
> 
> > > ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]
> 
> > > Trace:
> 
> > >
> 
> > >
> 
> > > - Other installed Elasticsearch or Kibana plugins, if any
> 
> > > Kibana
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > > Hello, I’m trying to work with search-guard for our data encryption.
> 
> > > I followed all the necessary steps of Installation from your page, and steps of generating the certificates from this page, by creating the root ca and intermediate ca - [https://search-guard.com/generating-certificates-tls-tool/](https://search-guard.com/generating-certificates-tls-tool/)
> 
> > >
> 
> > >
> 
> > > When trying to make the following step ( initialize search-guard) - ./sgadmin.sh -key ./kirk-key.pem -keypass 8Faq7qPtP1DH -cert ./kirk.pem -cacert ./root-ca.pem …
> 
> > >
> 
> > >
> 
> > > I receive the following error -
> 
> > > **WARNING: JAVA\_HOME not set, will use /usr/bin/java**
> 
> > > **Search Guard Admin v6**
> 
> > > **Will connect to localhost:9300 … done**
> 
> > > **ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**
> 
> > > **Trace:**
> 
> > >
> 
> > >
> 
> > > Could you please assist?
> 
> > >
> 
> > > Thanks!
> 
> > >
> 
> > > Aleksei
> 
> > >
> 
> > >

---

<div class="post-metadata">

**Author:** ![Aleksei\_Saiko1](https://avatars.discourse-cdn.com/v4/letter/a/bb73d2/32.png) [@Aleksei\_Saiko1](https://forum.search-guard.com/u/Aleksei_Saiko1)\
**Post date:** [December 3, 2018, 4:09pm UTC](https://forum.search-guard.com/t/failed-to-load-plugin-class-com-floragunn-searchguard-searchguardplugin/1225/5 "2018-12-03T16:09:58Z")

</div>

Hi Jochen.  
I installed search-guard as described on this page - [https://docs.search-guard.com/latest/search-guard-installation](https://docs.search-guard.com/latest/search-guard-installation) with OFFLINE installation , because of proxy.

Yes, I see this folder after the installation - /usr/share/elasticsearch/plugins/search-guard-6 , which is full with jar files , and 2 folders - sgconfig and tools.

I tried to install the standalone version of sgadmin that you gave me , and getting this error :

elasticsearch# bin/elasticsearch-plugin install -b file:///tmp/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip

→ Downloading file:///tmp/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip

[=================================================] 100%

Exception in thread “main” java.nio.file.NoSuchFileException: /usr/share/elasticsearch/plugins/.installing-8113436727227829214/plugin-descriptor.properties

```
at sun.nio.fs.UnixException.translateToIOException(UnixException.java:86)

at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102)

at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107)

at sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:214)

at java.nio.file.Files.newByteChannel(Files.java:361)

at java.nio.file.Files.newByteChannel(Files.java:407)

at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:384)

at java.nio.file.Files.newInputStream(Files.java:152)

at org.elasticsearch.plugins.PluginInfo.readFromProperties(PluginInfo.java:162)

at org.elasticsearch.plugins.InstallPluginCommand.loadPluginInfo(InstallPluginCommand.java:713)

at org.elasticsearch.plugins.InstallPluginCommand.installPlugin(InstallPluginCommand.java:792)

at org.elasticsearch.plugins.InstallPluginCommand.install(InstallPluginCommand.java:775)

at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:231)

at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:216)

at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)

at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)

at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:77)

at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)

at org.elasticsearch.cli.Command.main(Command.java:90)

at org.elasticsearch.plugins.PluginCli.main(PluginCli.java:47)

```

Any ideas?

Though I didn’t uninstalled the previous version, the question if it’s necessary, or can be installed upon.

Thanks,

Aleksei

 ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/8b522e9a7dfa019a8a3e66035f80dda65b9583a3.png)

> **···**
>
> ![](https://pipl.com/corp/wp-content/uploads/2017/11/Pipl_Sig.png)
> 
> ```
> **Aleksei Saiko**
> DevOps Engineer
> 
> +972-54-7261983 **|** Skype: aleksei.saiko 
> 
> [How PIPL Makes Sales Easier Even for the Best Salesmen](https://pipl.com/corp/pipl-makes-sales-easier-even-best-salesmen/)
> 
> ```

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [December 3, 2018, 4:51pm UTC](https://forum.search-guard.com/t/failed-to-load-plugin-class-com-floragunn-searchguard-searchguardplugin/1225/6 "2018-12-03T16:51:41Z")

</div>

Hi Aleksei,

sorry for not being clear enough. The sgadmin standalone is not a plugin for Elasticsearch. It is just sgadmin with all dependencies. You can just unzip it in any folder and then run the sgadmin.sh command. I want to check whether this version works. Because if it is, your issue is most likely related to classpath issue which I do not fully understand yet.

> **···**
>
> On Monday, December 3, 2018 at 5:10:15 PM UTC+1, Aleksei Saiko wrote:
> 
> > Hi Jochen.  
> > I installed search-guard as described on this page - [https://docs.search-guard.com/latest/search-guard-installation](https://docs.search-guard.com/latest/search-guard-installation) with OFFLINE installation , because of proxy.
> 
> > 
> 
> > Yes, I see this folder after the installation - /usr/share/elasticsearch/plugins/search-guard-6 , which is full with jar files , and 2 folders - sgconfig and tools.
> 
> > 
> 
> > I tried to install the standalone version of sgadmin that you gave me , and getting this error :
> 
> > 
> 
> > elasticsearch# bin/elasticsearch-plugin install -b file:///tmp/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip
> 
> > → Downloading file:///tmp/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip
> 
> > [=================================================] 100%
> 
> > Exception in thread “main” java.nio.file.NoSuchFileException: /usr/share/elasticsearch/plugins/.installing-8113436727227829214/plugin-descriptor.properties
> 
> > at sun.nio.fs.UnixException.translateToIOException(UnixException.java:86)
> 
> > at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102)
> 
> > at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107)
> 
> > at sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:214)
> 
> > at java.nio.file.Files.newByteChannel(Files.java:361)
> 
> > at java.nio.file.Files.newByteChannel(Files.java:407)
> 
> > at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:384)
> 
> > at java.nio.file.Files.newInputStream(Files.java:152)
> 
> > at org.elasticsearch.plugins.PluginInfo.readFromProperties(PluginInfo.java:162)
> 
> > at org.elasticsearch.plugins.InstallPluginCommand.loadPluginInfo(InstallPluginCommand.java:713)
> 
> > at org.elasticsearch.plugins.InstallPluginCommand.installPlugin(InstallPluginCommand.java:792)
> 
> > at org.elasticsearch.plugins.InstallPluginCommand.install(InstallPluginCommand.java:775)
> 
> > at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:231)
> 
> > at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:216)
> 
> > at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
> 
> > at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
> 
> > at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:77)
> 
> > at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
> 
> > at org.elasticsearch.cli.Command.main(Command.java:90)
> 
> > at org.elasticsearch.plugins.PluginCli.main(PluginCli.java:47)
> 
> > 
> 
> > 
> 
> > Any ideas?
> 
> > Though I didn’t uninstalled the previous version, the question if it’s necessary, or can be installed upon.
> 
> > 
> 
> > Thanks,
> 
> > 
> 
> > Aleksei
> 
> > 
> 
> > 
> 
> > On Thu, Nov 29, 2018 at 2:31 PM Jochen Kressin [jkressin@floragunn.com](mailto:jkressin@floragunn.com) wrote:
> 
> > > That is strange. How did you install Search Guard? With the elasticsearch-plugin install command?
> 
> > > The layout should look like:
> 
> > >
> 
> > > ![sg_layout.png](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/8b522e9a7dfa019a8a3e66035f80dda65b9583a3.png)
> 
> > > Do you see the the search-guard-6-.jar in the plugins/search-guard-6 folder?
> 
> > >
> 
> > > There is also an sgadmin standalone version that comes with all dependencies, can you try that?
> 
> > >
> 
> > > [https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-6/6.4.2-23.2/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip](https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-6/6.4.2-23.2/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip)
> 
> > > On Thursday, November 29, 2018 at 12:52:15 PM UTC+1, [aleksei.saiko@pipl.com](mailto:aleksei.saiko@pipl.com) wrote:
> > > 
> > > > Hi Jochen, thx for your answer.
> 
> > > > This is the full command, with the output , the Trace, is empty.
> 
> > > >
> 
> > > > r **oot@xxxx-001:tools# ./sgadmin.sh -key ./kirk-key.pem -keypass xxxxxxxxx -cert ./kirk.pem -cacert ./root-ca.pem -nhnv -icl**
> 
> > > > **WARNING: JAVA\_HOME not set, will use /usr/bin/java**
> 
> > > > **Search Guard Admin v6**
> 
> > > > **Will connect to localhost:9300 … done**
> 
> > > > **ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**
> 
> > > > **Trace:**
> 
> > > >
> 
> > > >
> 
> > > > On Thursday, November 29, 2018 at 12:50:07 PM UTC+2, [alekse...@pipl.com](mailto:alekse...@pipl.com) wrote:
> > > > 
> > > > >
> 
> > > > > - **Search Guard and Elasticsearch version**
> 
> > > > > SG - 6.4.2-23.2
> 
> > > > > ES - 6.4.2
> 
> > > > >
> 
> > > > >
> 
> > > > > - **JVM version and operating system version**
> 
> > > > > java version “1.8.0\_162”
> 
> > > > > Java™ SE Runtime Environment (build 1.8.0\_162-b12)
> 
> > > > > Java HotSpot™ 64-Bit Server VM (build 25.162-b12, mixed mode)
> 
> > > > >
> 
> > > > >
> 
> > > > > NAME=“Ubuntu”
> 
> > > > > VERSION=“18.04.1 LTS (Bionic Beaver)”
> 
> > > > > ID=ubuntu
> 
> > > > > ID\_LIKE=debian
> 
> > > > > PRETTY\_NAME=“Ubuntu 18.04.1 LTS”
> 
> > > > > VERSION\_ID=“18.04”
> 
> > > > >
> 
> > > > >
> 
> > > > > - **Search Guard configuration files**
> 
> > > > > **config.yml**
> 
> > > > > **--------------**
> 
> > > > > ca:
> 
> > > > > root:
> 
> > > > > # The distinguished name of this CA. You must specify a distinguished name.
> 
> > > > > dn: CN=[root.ca.pipl.pro](http://root.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > > > > pkPassword: xxxxxxxx
> 
> > > > > file: root-ca.pem
> 
> > > > > intermediate:
> 
> > > > > dn: CN=[signing.ca.pipl.pro](http://signing.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > > > > pkPassword: xxxxxxxxx
> 
> > > > > file: intermediate-ca.pem
> 
> > > > >
> 
> > > > >
> 
> > > > > defaults:
> 
> > > > > validityDays: 3650
> 
> > > > > pkPassword: auto
> 
> > > > > httpsEnabled: true
> 
> > > > > verifyHostnames: true
> 
> > > > > resolveHostnames: true
> 
> > > > >
> 
> > > > >
> 
> > > > >
> 
> > > > > nodes:
> 
> > > > > - name: [xxxxxxx-001.xxxxx.pro](http://xxxxxxx-001.xxxxx.pro)
> 
> > > > > dn: CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxx,L=IL,C=IL,DC=pro
> 
> > > > > dns: [xxxxxxx-001.xxxxxxl.pro](http://xxxxxxx-001.xxxxxxl.pro)
> 
> > > > > - name: [xxxxxxxx-002.xxxxxxx.pro](http://xxxxxxxx-002.xxxxxxx.pro)
> 
> > > > > dn: CN=[xxxxxxx-002.xxxxxx.pro](http://xxxxxxx-002.xxxxxx.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > dns: [xxxxxx-002.xxxxx.pro](http://xxxxxx-002.xxxxx.pro)
> 
> > > > > - name: node3
> 
> > > > > dn: CN=[xxxxxxx-002.xxxxx.pro](http://xxxxxxx-002.xxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > dns: [xxxxxxx-003.xxxxxx.pro](http://xxxxxxx-003.xxxxxx.pro)
> 
> > > > >
> 
> > > > >
> 
> > > > > clients:
> 
> > > > > - name: spock
> 
> > > > > dn: CN=[spock.xxxxxx.pro](http://spock.xxxxxx.pro),OU=IL,O=xxxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > - name: kirk
> 
> > > > > dn: CN=[kirk.xxxxxx.pro](http://kirk.xxxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > admin: true
> 
> > > > >
> 
> > > > >
> 
> > > > >
> 
> > > > > **elasticsearch.yml**
> 
> > > > > **----------------------**
> 
> > > > > searchguard.ssl.transport.pemcert\_filepath: xxxxxxx-001.xxxxxxx.pro.pem
> 
> > > > > searchguard.ssl.transport.pemkey\_filepath: xxxxxxx-001.xxxxxx.pro.key
> 
> > > > > searchguard.ssl.transport.pemkey\_password: xxxxxxxxx
> 
> > > > > searchguard.ssl.transport.pemtrustedcas\_filepath: root-ca.pem
> 
> > > > > searchguard.ssl.transport.enforce\_hostname\_verification: true
> 
> > > > > searchguard.ssl.transport.resolve\_hostname: true
> 
> > > > > searchguard.ssl.http.enabled: false
> 
> > > > > searchguard.ssl.http.pemcert\_filepath: xxxxxxxx-001.xxxxxxx.pro\_http.pem
> 
> > > > > searchguard.ssl.http.pemkey\_filepath: xxxxxx.xxxxxx.pro\_http.key
> 
> > > > > searchguard.ssl.http.pemkey\_password: LUIL6RfUFAQL
> 
> > > > > searchguard.ssl.http.pemtrustedcas\_filepath: root-ca.pem
> 
> > > > > searchguard.nodes\_dn:
> 
> > > > > - CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > searchguard.authcz.admin\_dn:
> 
> > > > > - CN=[kirk.pipl.pro](http://kirk.pipl.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > “elasticsearch.yml” 195L, 6423C
> 
> > > > >
> 
> > > > >
> 
> > > > >
> 
> > > > >
> 
> > > > > - Elasticsearch log messages on debug level
> 
> > > > > [2018-11-29T10:29:15,389][ERROR][c.f.s.a.BackendRegistry] Not yet initialized (you may need to run sgadmin)
> 
> > > > >
> 
> > > > >
> 
> > > > > \*\*AFTER INITIALIZING \*\*
> 
> > > > > **----------------------**
> 
> > > > > WARNING: JAVA\_HOME not set, will use /usr/bin/java
> 
> > > > > Search Guard Admin v6
> 
> > > > > Will connect to localhost:9300 … done
> 
> > > > > ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]
> 
> > > > > Trace:
> 
> > > > >
> 
> > > > >
> 
> > > > > - Other installed Elasticsearch or Kibana plugins, if any
> 
> > > > > Kibana
> 
> > > > >
> 
> > > > >
> 
> > > > >
> 
> > > > >
> 
> > > > >
> 
> > > > >
> 
> > > > >
> 
> > > > > Hello, I’m trying to work with search-guard for our data encryption.
> 
> > > > > I followed all the necessary steps of Installation from your page, and steps of generating the certificates from this page, by creating the root ca and intermediate ca - [https://search-guard.com/generating-certificates-tls-tool/](https://search-guard.com/generating-certificates-tls-tool/)
> 
> > > > >
> 
> > > > >
> 
> > > > > When trying to make the following step ( initialize search-guard) - ./sgadmin.sh -key ./kirk-key.pem -keypass 8Faq7qPtP1DH -cert ./kirk.pem -cacert ./root-ca.pem …
> 
> > > > >
> 
> > > > >
> 
> > > > > I receive the following error -
> 
> > > > > **WARNING: JAVA\_HOME not set, will use /usr/bin/java**
> 
> > > > > **Search Guard Admin v6**
> 
> > > > > **Will connect to localhost:9300 … done**
> 
> > > > > **ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**
> 
> > > > > **Trace:**
> 
> > > > >
> 
> > > > >
> 
> > > > > Could you please assist?
> 
> > > > >
> 
> > > > > Thanks!
> 
> > > > >
> 
> > > > > Aleksei
> 
> > > > >
> 
> > > > >
> 
> > > –
> > > 
> > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group.
> > > 
> > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com).
> > > 
> > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com).
> > > 
> > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/83ea3c22-1c29-409c-bd4f-47eeb1fbdc3c%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/83ea3c22-1c29-409c-bd4f-47eeb1fbdc3c%40googlegroups.com?utm_medium=email&utm_source=footer).
> > > 
> > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> 
> > 
> 
> > –
> 
> > 
> 
> > ```
> > **Aleksei Saiko**
> > DevOps Engineer
> > 
> > ```
> 
> > 
> 
> > ```
> > +972-54-7261983 **|** Skype: aleksei.saiko 
> > 
> > ```
> 
> > ```
> > [How PIPL Makes Sales Easier Even for the Best Salesmen](https://pipl.com/corp/pipl-makes-sales-easier-even-best-salesmen/)
> > 
> > ```

---

<div class="post-metadata">

**Author:** ![Aleksei\_Saiko1](https://avatars.discourse-cdn.com/v4/letter/a/bb73d2/32.png) [@Aleksei\_Saiko1](https://forum.search-guard.com/u/Aleksei_Saiko1)\
**Post date:** [December 4, 2018, 12:08pm UTC](https://forum.search-guard.com/t/failed-to-load-plugin-class-com-floragunn-searchguard-searchguardplugin/1225/7 "2018-12-04T12:08:25Z")

</div>

Hi Jochen,

_ **root@es-xxxxx:tools# ./sgadmin.sh -key ./kirk-key.pem -keypass kbdAmjDd9Tdw -cert ./kirk.pem -cacert ./root-ca.pem -nhnv -icl** _

_ **WARNING: JAVA\_HOME not set, will use /usr/bin/java** _

_ **Search Guard Admin v6** _

_ **Will connect to localhost:9300 … done** _

_**ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**_

_ **Trace:** _

Same result with the file with all the dependencies that you gave me ☹

> **···**
>
> ![](https://pipl.com/corp/wp-content/uploads/2017/11/Pipl_Sig.png)
> 
> ```
> **Aleksei Saiko**
> DevOps Engineer
> 
> +972-54-7261983 **|** Skype: aleksei.saiko 
> 
> [How PIPL Makes Sales Easier Even for the Best Salesmen](https://pipl.com/corp/pipl-makes-sales-easier-even-best-salesmen/)
> 
> ```

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [December 4, 2018, 10:14pm UTC](https://forum.search-guard.com/t/failed-to-load-plugin-class-com-floragunn-searchguard-searchguardplugin/1225/8 "2018-12-04T22:14:20Z")

</div>

This is likely because one of your certificate or key files can not be found. Normally you should get a detailed error message on stderr but i don’t see it too ☹

Will fix this.

Meanwhile pls try [https://oss.sonatype.org/content/repositories/snapshots/com/floragunn/search-guard-6/6.4.2-23.2-SNAPSHOT/search-guard-6-6.4.2-23.2-20181204.215859-4-sgadmin-standalone.tar.gz](https://oss.sonatype.org/content/repositories/snapshots/com/floragunn/search-guard-6/6.4.2-23.2-SNAPSHOT/search-guard-6-6.4.2-23.2-20181204.215859-4-sgadmin-standalone.tar.gz) which should print out a detailed error message on stdout.

> **···**
>
> On Tuesday, 4 December 2018 13:08:40 UTC+1, Aleksei Saiko wrote:
> 
> > Hi Jochen,
> 
> > _ **root@es-xxxxx:tools# ./sgadmin.sh -key ./kirk-key.pem -keypass kbdAmjDd9Tdw -cert ./kirk.pem -cacert ./root-ca.pem -nhnv -icl** _
> 
> > _ **WARNING: JAVA\_HOME not set, will use /usr/bin/java** _
> 
> > _ **Search Guard Admin v6** _
> 
> > _ **Will connect to localhost:9300 … done** _
> 
> > _**ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**_
> 
> > _ **Trace:** _
> 
> > Same result with the file with all the dependencies that you gave me ☹
> 
> > On Mon, Dec 3, 2018 at 6:51 PM Jochen Kressin wrote:
> 
> > > Hi Aleksei,
> 
> > > sorry for not being clear enough. The sgadmin standalone is not a plugin for Elasticsearch. It is just sgadmin with all dependencies. You can just unzip it in any folder and then run the sgadmin.sh command. I want to check whether this version works. Because if it is, your issue is most likely related to classpath issue which I do not fully understand yet.
> > > 
> > > On Monday, December 3, 2018 at 5:10:15 PM UTC+1, Aleksei Saiko wrote:
> > > 
> > > > Hi Jochen.  
> > > > I installed search-guard as described on this page - [https://docs.search-guard.com/latest/search-guard-installation](https://docs.search-guard.com/latest/search-guard-installation) with OFFLINE installation , because of proxy.
> 
> > > >
> 
> > > > Yes, I see this folder after the installation - /usr/share/elasticsearch/plugins/search-guard-6 , which is full with jar files , and 2 folders - sgconfig and tools.
> 
> > > >
> 
> > > > I tried to install the standalone version of sgadmin that you gave me , and getting this error :
> 
> > > >
> 
> > > > elasticsearch# bin/elasticsearch-plugin install -b file:///tmp/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip
> 
> > > > → Downloading file:///tmp/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip
> 
> > > > [=================================================] 100%
> 
> > > > Exception in thread “main” java.nio.file.NoSuchFileException: /usr/share/elasticsearch/plugins/.installing-8113436727227829214/plugin-descriptor.properties
> 
> > > > ```
> > > > at sun.nio.fs.UnixException.translateToIOException(UnixException.java:86)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:214)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at java.nio.file.Files.newByteChannel(Files.java:361)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at java.nio.file.Files.newByteChannel(Files.java:407)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:384)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at java.nio.file.Files.newInputStream(Files.java:152)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.plugins.PluginInfo.readFromProperties(PluginInfo.java:162)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.plugins.InstallPluginCommand.loadPluginInfo(InstallPluginCommand.java:713)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.plugins.InstallPluginCommand.installPlugin(InstallPluginCommand.java:792)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.plugins.InstallPluginCommand.install(InstallPluginCommand.java:775)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:231)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:216)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:77)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.cli.Command.main(Command.java:90)
> > > > 
> > > > ```
> 
> > > > ```
> > > > at org.elasticsearch.plugins.PluginCli.main(PluginCli.java:47)
> > > > 
> > > > ```
> 
> > > >
> 
> > > >
> 
> > > > Any ideas?
> 
> > > > Though I didn’t uninstalled the previous version, the question if it’s necessary, or can be installed upon.
> 
> > > >
> 
> > > > Thanks,
> 
> > > >
> 
> > > > Aleksei
> 
> > > >
> 
> > > >
> 
> > > > On Thu, Nov 29, 2018 at 2:31 PM Jochen Kressin wrote:
> 
> > > > > That is strange. How did you install Search Guard? With the elasticsearch-plugin install command?
> 
> > > > > The layout should look like:
> 
> > > > >
> 
> > > > > ![sg_layout.png](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/8b522e9a7dfa019a8a3e66035f80dda65b9583a3.png)
> 
> > > > > Do you see the the search-guard-6-.jar in the plugins/search-guard-6 folder?
> 
> > > > >
> 
> > > > > There is also an sgadmin standalone version that comes with all dependencies, can you try that?
> 
> > > > >
> 
> > > > > [https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-6/6.4.2-23.2/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip](https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-6/6.4.2-23.2/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip)
> 
> > > > > On Thursday, November 29, 2018 at 12:52:15 PM UTC+1 wrote:
> > > > > 
> > > > > > Hi Jochen, thx for your answer.
> 
> > > > > > This is the full command, with the output , the Trace, is empty.
> 
> > > > > >
> 
> > > > > > r **oot@xxxx-001:tools# ./sgadmin.sh -key ./kirk-key.pem -keypass xxxxxxxxx -cert ./kirk.pem -cacert ./root-ca.pem -nhnv -icl**
> 
> > > > > > **WARNING: JAVA\_HOME not set, will use /usr/bin/java**
> 
> > > > > > **Search Guard Admin v6**
> 
> > > > > > **Will connect to localhost:9300 … done**
> 
> > > > > > **ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**
> 
> > > > > > **Trace:**
> 
> > > > > >
> 
> > > > > >
> 
> > > > > > On Thursday, November 29, 2018 at 12:50:07 PM UTC+2, [alekse...@pipl.com](mailto:alekse...@pipl.com) wrote:
> > > > > > 
> > > > > > >
> 
> > > > > > > - **Search Guard and Elasticsearch version**
> 
> > > > > > > SG - 6.4.2-23.2
> 
> > > > > > > ES - 6.4.2
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > - **JVM version and operating system version**
> 
> > > > > > > java version “1.8.0\_162”
> 
> > > > > > > Java™ SE Runtime Environment (build 1.8.0\_162-b12)
> 
> > > > > > > Java HotSpot™ 64-Bit Server VM (build 25.162-b12, mixed mode)
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > NAME=“Ubuntu”
> 
> > > > > > > VERSION=“18.04.1 LTS (Bionic Beaver)”
> 
> > > > > > > ID=ubuntu
> 
> > > > > > > ID\_LIKE=debian
> 
> > > > > > > PRETTY\_NAME=“Ubuntu 18.04.1 LTS”
> 
> > > > > > > VERSION\_ID=“18.04”
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > - **Search Guard configuration files**
> 
> > > > > > > **config.yml**
> 
> > > > > > > **--------------**
> 
> > > > > > > ca:
> 
> > > > > > > root:
> 
> > > > > > > # The distinguished name of this CA. You must specify a distinguished name.
> 
> > > > > > > dn: CN=[root.ca.pipl.pro](http://root.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > > > > > > pkPassword: xxxxxxxx
> 
> > > > > > > file: root-ca.pem
> 
> > > > > > > intermediate:
> 
> > > > > > > dn: CN=[signing.ca.pipl.pro](http://signing.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > > > > > > pkPassword: xxxxxxxxx
> 
> > > > > > > file: intermediate-ca.pem
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > defaults:
> 
> > > > > > > validityDays: 3650
> 
> > > > > > > pkPassword: auto
> 
> > > > > > > httpsEnabled: true
> 
> > > > > > > verifyHostnames: true
> 
> > > > > > > resolveHostnames: true
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > nodes:
> 
> > > > > > > - name: [xxxxxxx-001.xxxxx.pro](http://xxxxxxx-001.xxxxx.pro)
> 
> > > > > > > dn: CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > dns: [xxxxxxx-001.xxxxxxl.pro](http://xxxxxxx-001.xxxxxxl.pro)
> 
> > > > > > > - name: [xxxxxxxx-002.xxxxxxx.pro](http://xxxxxxxx-002.xxxxxxx.pro)
> 
> > > > > > > dn: CN=[xxxxxxx-002.xxxxxx.pro](http://xxxxxxx-002.xxxxxx.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > dns: [xxxxxx-002.xxxxx.pro](http://xxxxxx-002.xxxxx.pro)
> 
> > > > > > > - name: node3
> 
> > > > > > > dn: CN=[xxxxxxx-002.xxxxx.pro](http://xxxxxxx-002.xxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > dns: [xxxxxxx-003.xxxxxx.pro](http://xxxxxxx-003.xxxxxx.pro)
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > clients:
> 
> > > > > > > - name: spock
> 
> > > > > > > dn: CN=[spock.xxxxxx.pro](http://spock.xxxxxx.pro),OU=IL,O=xxxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > - name: kirk
> 
> > > > > > > dn: CN=[kirk.xxxxxx.pro](http://kirk.xxxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > admin: true
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > **elasticsearch.yml**
> 
> > > > > > > **----------------------**
> 
> > > > > > > searchguard.ssl.transport.pemcert\_filepath: xxxxxxx-001.xxxxxxx.pro.pem
> 
> > > > > > > searchguard.ssl.transport.pemkey\_filepath: xxxxxxx-001.xxxxxx.pro.key
> 
> > > > > > > searchguard.ssl.transport.pemkey\_password: xxxxxxxxx
> 
> > > > > > > searchguard.ssl.transport.pemtrustedcas\_filepath: root-ca.pem
> 
> > > > > > > searchguard.ssl.transport.enforce\_hostname\_verification: true
> 
> > > > > > > searchguard.ssl.transport.resolve\_hostname: true
> 
> > > > > > > searchguard.ssl.http.enabled: false
> 
> > > > > > > searchguard.ssl.http.pemcert\_filepath: xxxxxxxx-001.xxxxxxx.pro\_http.pem
> 
> > > > > > > searchguard.ssl.http.pemkey\_filepath: xxxxxx.xxxxxx.pro\_http.key
> 
> > > > > > > searchguard.ssl.http.pemkey\_password: LUIL6RfUFAQL
> 
> > > > > > > searchguard.ssl.http.pemtrustedcas\_filepath: root-ca.pem
> 
> > > > > > > searchguard.nodes\_dn:
> 
> > > > > > > - CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > searchguard.authcz.admin\_dn:
> 
> > > > > > > - CN=[kirk.pipl.pro](http://kirk.pipl.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > “elasticsearch.yml” 195L, 6423C
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > - Elasticsearch log messages on debug level
> 
> > > > > > > [2018-11-29T10:29:15,389][ERROR][c.f.s.a.BackendRegistry] Not yet initialized (you may need to run sgadmin)
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > \*\*AFTER INITIALIZING \*\*
> 
> > > > > > > **----------------------**
> 
> > > > > > > WARNING: JAVA\_HOME not set, will use /usr/bin/java
> 
> > > > > > > Search Guard Admin v6
> 
> > > > > > > Will connect to localhost:9300 … done
> 
> > > > > > > ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]
> 
> > > > > > > Trace:
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > - Other installed Elasticsearch or Kibana plugins, if any
> 
> > > > > > > Kibana
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > Hello, I’m trying to work with search-guard for our data encryption.
> 
> > > > > > > I followed all the necessary steps of Installation from your page, and steps of generating the certificates from this page, by creating the root ca and intermediate ca - [https://search-guard.com/generating-certificates-tls-tool/](https://search-guard.com/generating-certificates-tls-tool/)
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > When trying to make the following step ( initialize search-guard) - ./sgadmin.sh -key ./kirk-key.pem -keypass 8Faq7qPtP1DH -cert ./kirk.pem -cacert ./root-ca.pem …
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > I receive the following error -
> 
> > > > > > > **WARNING: JAVA\_HOME not set, will use /usr/bin/java**
> 
> > > > > > > **Search Guard Admin v6**
> 
> > > > > > > **Will connect to localhost:9300 … done**
> 
> > > > > > > **ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**
> 
> > > > > > > **Trace:**
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > Could you please assist?
> 
> > > > > > >
> 
> > > > > > > Thanks!
> 
> > > > > > >
> 
> > > > > > > Aleksei
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > –
> > > > > 
> > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group.
> > > > > 
> > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com).
> > > > > 
> > > > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com).
> > > > > 
> > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/83ea3c22-1c29-409c-bd4f-47eeb1fbdc3c%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/83ea3c22-1c29-409c-bd4f-47eeb1fbdc3c%40googlegroups.com?utm_medium=email&utm_source=footer).
> > > > > 
> > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> 
> > > >

---

<div class="post-metadata">

**Author:** ![Aleksei\_Saiko1](https://avatars.discourse-cdn.com/v4/letter/a/bb73d2/32.png) [@Aleksei\_Saiko1](https://forum.search-guard.com/u/Aleksei_Saiko1)\
**Post date:** [December 13, 2018, 4:55pm UTC](https://forum.search-guard.com/t/failed-to-load-plugin-class-com-floragunn-searchguard-searchguardplugin/1225/9 "2018-12-13T16:55:40Z")

</div>

Hi!  
Well, still, Trace is empty.  
Once again, to be aligned.

All certificates and keys in one folder, like was demanded in - [Production-ready TLS certificates for Elasticsearch | Search Guard](https://search-guard.com/generating-certificates-tls-tool/) , which was pretty straightforward.  
I also tried to make the key non encrypted, still, didn’t help, same error with empty Trace ☹

Any other ideas what can be the problem?  
Maybe some other useful information that I can provide?

> **···**
>
> On Wednesday, December 5, 2018 at 12:14:20 AM UTC+2, Search Guard wrote:
> 
> > This is likely because one of your certificate or key files can not be found. Normally you should get a detailed error message on stderr but i don’t see it too ☹
> 
> > Will fix this.
> 
> > 
> 
> > Meanwhile pls try [https://oss.sonatype.org/content/repositories/snapshots/com/floragunn/search-guard-6/6.4.2-23.2-SNAPSHOT/search-guard-6-6.4.2-23.2-20181204.215859-4-sgadmin-standalone.tar.gz](https://oss.sonatype.org/content/repositories/snapshots/com/floragunn/search-guard-6/6.4.2-23.2-SNAPSHOT/search-guard-6-6.4.2-23.2-20181204.215859-4-sgadmin-standalone.tar.gz) which should print out a detailed error message on stdout.
> 
> > On Tuesday, 4 December 2018 13:08:40 UTC+1, Aleksei Saiko wrote:
> > 
> > > Hi Jochen,
> 
> > > _ **root@es-xxxxx:tools# ./sgadmin.sh -key ./kirk-key.pem -keypass kbdAmjDd9Tdw -cert ./kirk.pem -cacert ./root-ca.pem -nhnv -icl** _
> 
> > > _ **WARNING: JAVA\_HOME not set, will use /usr/bin/java** _
> 
> > > _ **Search Guard Admin v6** _
> 
> > > _ **Will connect to localhost:9300 … done** _
> 
> > > _**ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**_
> 
> > > _ **Trace:** _
> 
> > > Same result with the file with all the dependencies that you gave me ☹
> 
> > > On Mon, Dec 3, 2018 at 6:51 PM Jochen Kressin wrote:
> 
> > > > Hi Aleksei,
> 
> > > > sorry for not being clear enough. The sgadmin standalone is not a plugin for Elasticsearch. It is just sgadmin with all dependencies. You can just unzip it in any folder and then run the sgadmin.sh command. I want to check whether this version works. Because if it is, your issue is most likely related to classpath issue which I do not fully understand yet.
> > > > 
> > > > On Monday, December 3, 2018 at 5:10:15 PM UTC+1, Aleksei Saiko wrote:
> > > > 
> > > > > Hi Jochen.  
> > > > > I installed search-guard as described on this page - [https://docs.search-guard.com/latest/search-guard-installation](https://docs.search-guard.com/latest/search-guard-installation) with OFFLINE installation , because of proxy.
> 
> > > > >
> 
> > > > > Yes, I see this folder after the installation - /usr/share/elasticsearch/plugins/search-guard-6 , which is full with jar files , and 2 folders - sgconfig and tools.
> 
> > > > >
> 
> > > > > I tried to install the standalone version of sgadmin that you gave me , and getting this error :
> 
> > > > >
> 
> > > > > elasticsearch# bin/elasticsearch-plugin install -b file:///tmp/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip
> 
> > > > > → Downloading file:///tmp/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip
> 
> > > > > [=================================================] 100%
> 
> > > > > Exception in thread “main” java.nio.file.NoSuchFileException: /usr/share/elasticsearch/plugins/.installing-8113436727227829214/plugin-descriptor.properties
> 
> > > > > ```
> > > > > at sun.nio.fs.UnixException.translateToIOException(UnixException.java:86)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:214)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at java.nio.file.Files.newByteChannel(Files.java:361)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at java.nio.file.Files.newByteChannel(Files.java:407)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:384)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at java.nio.file.Files.newInputStream(Files.java:152)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.plugins.PluginInfo.readFromProperties(PluginInfo.java:162)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.plugins.InstallPluginCommand.loadPluginInfo(InstallPluginCommand.java:713)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.plugins.InstallPluginCommand.installPlugin(InstallPluginCommand.java:792)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.plugins.InstallPluginCommand.install(InstallPluginCommand.java:775)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:231)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.plugins.InstallPluginCommand.execute(InstallPluginCommand.java:216)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.cli.MultiCommand.execute(MultiCommand.java:77)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:124)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.cli.Command.main(Command.java:90)
> > > > > 
> > > > > ```
> 
> > > > > ```
> > > > > at org.elasticsearch.plugins.PluginCli.main(PluginCli.java:47)
> > > > > 
> > > > > ```
> 
> > > > >
> 
> > > > >
> 
> > > > > Any ideas?
> 
> > > > > Though I didn’t uninstalled the previous version, the question if it’s necessary, or can be installed upon.
> 
> > > > >
> 
> > > > > Thanks,
> 
> > > > >
> 
> > > > > Aleksei
> 
> > > > >
> 
> > > > >
> 
> > > > > On Thu, Nov 29, 2018 at 2:31 PM Jochen Kressin wrote:
> 
> > > > > > That is strange. How did you install Search Guard? With the elasticsearch-plugin install command?
> 
> > > > > > The layout should look like:
> 
> > > > > >
> 
> > > > > > ![sg_layout.png](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/8b522e9a7dfa019a8a3e66035f80dda65b9583a3.png)
> 
> > > > > > Do you see the the search-guard-6-.jar in the plugins/search-guard-6 folder?
> 
> > > > > >
> 
> > > > > > There is also an sgadmin standalone version that comes with all dependencies, can you try that?
> 
> > > > > >
> 
> > > > > > [https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-6/6.4.2-23.2/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip](https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-6/6.4.2-23.2/search-guard-6-6.4.2-23.2-sgadmin-standalone.zip)
> 
> > > > > > On Thursday, November 29, 2018 at 12:52:15 PM UTC+1 wrote:
> > > > > > 
> > > > > > > Hi Jochen, thx for your answer.
> 
> > > > > > > This is the full command, with the output , the Trace, is empty.
> 
> > > > > > >
> 
> > > > > > > r **oot@xxxx-001:tools# ./sgadmin.sh -key ./kirk-key.pem -keypass xxxxxxxxx -cert ./kirk.pem -cacert ./root-ca.pem -nhnv -icl**
> 
> > > > > > > **WARNING: JAVA\_HOME not set, will use /usr/bin/java**
> 
> > > > > > > **Search Guard Admin v6**
> 
> > > > > > > **Will connect to localhost:9300 … done**
> 
> > > > > > > **ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**
> 
> > > > > > > **Trace:**
> 
> > > > > > >
> 
> > > > > > >
> 
> > > > > > > On Thursday, November 29, 2018 at 12:50:07 PM UTC+2, [alekse...@pipl.com](mailto:alekse...@pipl.com) wrote:
> > > > > > > 
> > > > > > > >
> 
> > > > > > > > - **Search Guard and Elasticsearch version**
> 
> > > > > > > > SG - 6.4.2-23.2
> 
> > > > > > > > ES - 6.4.2
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > - **JVM version and operating system version**
> 
> > > > > > > > java version “1.8.0\_162”
> 
> > > > > > > > Java™ SE Runtime Environment (build 1.8.0\_162-b12)
> 
> > > > > > > > Java HotSpot™ 64-Bit Server VM (build 25.162-b12, mixed mode)
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > NAME=“Ubuntu”
> 
> > > > > > > > VERSION=“18.04.1 LTS (Bionic Beaver)”
> 
> > > > > > > > ID=ubuntu
> 
> > > > > > > > ID\_LIKE=debian
> 
> > > > > > > > PRETTY\_NAME=“Ubuntu 18.04.1 LTS”
> 
> > > > > > > > VERSION\_ID=“18.04”
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > - **Search Guard configuration files**
> 
> > > > > > > > **config.yml**
> 
> > > > > > > > **--------------**
> 
> > > > > > > > ca:
> 
> > > > > > > > root:
> 
> > > > > > > > # The distinguished name of this CA. You must specify a distinguished name.
> 
> > > > > > > > dn: CN=[root.ca.pipl.pro](http://root.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > > > > > > > pkPassword: xxxxxxxx
> 
> > > > > > > > file: root-ca.pem
> 
> > > > > > > > intermediate:
> 
> > > > > > > > dn: CN=[signing.ca.pipl.pro](http://signing.ca.pipl.pro),OU=IL,O=Pipl,L=IL,C=IL,DC=pro
> 
> > > > > > > > pkPassword: xxxxxxxxx
> 
> > > > > > > > file: intermediate-ca.pem
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > defaults:
> 
> > > > > > > > validityDays: 3650
> 
> > > > > > > > pkPassword: auto
> 
> > > > > > > > httpsEnabled: true
> 
> > > > > > > > verifyHostnames: true
> 
> > > > > > > > resolveHostnames: true
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > nodes:
> 
> > > > > > > > - name: [xxxxxxx-001.xxxxx.pro](http://xxxxxxx-001.xxxxx.pro)
> 
> > > > > > > > dn: CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > > dns: [xxxxxxx-001.xxxxxxl.pro](http://xxxxxxx-001.xxxxxxl.pro)
> 
> > > > > > > > - name: [xxxxxxxx-002.xxxxxxx.pro](http://xxxxxxxx-002.xxxxxxx.pro)
> 
> > > > > > > > dn: CN=[xxxxxxx-002.xxxxxx.pro](http://xxxxxxx-002.xxxxxx.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > > dns: [xxxxxx-002.xxxxx.pro](http://xxxxxx-002.xxxxx.pro)
> 
> > > > > > > > - name: node3
> 
> > > > > > > > dn: CN=[xxxxxxx-002.xxxxx.pro](http://xxxxxxx-002.xxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > > dns: [xxxxxxx-003.xxxxxx.pro](http://xxxxxxx-003.xxxxxx.pro)
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > clients:
> 
> > > > > > > > - name: spock
> 
> > > > > > > > dn: CN=[spock.xxxxxx.pro](http://spock.xxxxxx.pro),OU=IL,O=xxxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > > - name: kirk
> 
> > > > > > > > dn: CN=[kirk.xxxxxx.pro](http://kirk.xxxxxx.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > > admin: true
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > **elasticsearch.yml**
> 
> > > > > > > > **----------------------**
> 
> > > > > > > > searchguard.ssl.transport.pemcert\_filepath: xxxxxxx-001.xxxxxxx.pro.pem
> 
> > > > > > > > searchguard.ssl.transport.pemkey\_filepath: xxxxxxx-001.xxxxxx.pro.key
> 
> > > > > > > > searchguard.ssl.transport.pemkey\_password: xxxxxxxxx
> 
> > > > > > > > searchguard.ssl.transport.pemtrustedcas\_filepath: root-ca.pem
> 
> > > > > > > > searchguard.ssl.transport.enforce\_hostname\_verification: true
> 
> > > > > > > > searchguard.ssl.transport.resolve\_hostname: true
> 
> > > > > > > > searchguard.ssl.http.enabled: false
> 
> > > > > > > > searchguard.ssl.http.pemcert\_filepath: xxxxxxxx-001.xxxxxxx.pro\_http.pem
> 
> > > > > > > > searchguard.ssl.http.pemkey\_filepath: xxxxxx.xxxxxx.pro\_http.key
> 
> > > > > > > > searchguard.ssl.http.pemkey\_password: LUIL6RfUFAQL
> 
> > > > > > > > searchguard.ssl.http.pemtrustedcas\_filepath: root-ca.pem
> 
> > > > > > > > searchguard.nodes\_dn:
> 
> > > > > > > > - CN=[es-k8s-001.pipl.pro](http://es-k8s-001.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > > - CN=[es-k8s-002.pipl.pro](http://es-k8s-002.pipl.pro),OU=IL,O=xxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > > searchguard.authcz.admin\_dn:
> 
> > > > > > > > - CN=[kirk.pipl.pro](http://kirk.pipl.pro),OU=IL,O=xxxxxx,L=IL,C=IL,DC=pro
> 
> > > > > > > > “elasticsearch.yml” 195L, 6423C
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > - Elasticsearch log messages on debug level
> 
> > > > > > > > [2018-11-29T10:29:15,389][ERROR][c.f.s.a.BackendRegistry] Not yet initialized (you may need to run sgadmin)
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > \*\*AFTER INITIALIZING \*\*
> 
> > > > > > > > **----------------------**
> 
> > > > > > > > WARNING: JAVA\_HOME not set, will use /usr/bin/java
> 
> > > > > > > > Search Guard Admin v6
> 
> > > > > > > > Will connect to localhost:9300 … done
> 
> > > > > > > > ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]
> 
> > > > > > > > Trace:
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > - Other installed Elasticsearch or Kibana plugins, if any
> 
> > > > > > > > Kibana
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > Hello, I’m trying to work with search-guard for our data encryption.
> 
> > > > > > > > I followed all the necessary steps of Installation from your page, and steps of generating the certificates from this page, by creating the root ca and intermediate ca - [https://search-guard.com/generating-certificates-tls-tool/](https://search-guard.com/generating-certificates-tls-tool/)
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > When trying to make the following step ( initialize search-guard) - ./sgadmin.sh -key ./kirk-key.pem -keypass 8Faq7qPtP1DH -cert ./kirk.pem -cacert ./root-ca.pem …
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > I receive the following error -
> 
> > > > > > > > **WARNING: JAVA\_HOME not set, will use /usr/bin/java**
> 
> > > > > > > > **Search Guard Admin v6**
> 
> > > > > > > > **Will connect to localhost:9300 … done**
> 
> > > > > > > > **ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]**
> 
> > > > > > > > **Trace:**
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > > > Could you please assist?
> 
> > > > > > > >
> 
> > > > > > > > Thanks!
> 
> > > > > > > >
> 
> > > > > > > > Aleksei
> 
> > > > > > > >
> 
> > > > > > > >
> 
> > > > > > –
> > > > > > 
> > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group.
> > > > > > 
> > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com).
> > > > > > 
> > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com).
> > > > > > 
> > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/83ea3c22-1c29-409c-bd4f-47eeb1fbdc3c%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/83ea3c22-1c29-409c-bd4f-47eeb1fbdc3c%40googlegroups.com?utm_medium=email&utm_source=footer).
> > > > > > 
> > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> 
> > > > >