How to install enterprise license for SearchGuard 5

Hi,

I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg_config Enterprise Edition | Security for Elasticsearch | Search Guard?

Search Guard 5 does not require a license. We changed the package and license model from 5 to 6:

In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files:

SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated.

···

On Monday, February 18, 2019 at 5:48:18 PM UTC+1, ploffay@redhat.com wrote:

Hi,

I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg_config https://docs.search-guard.com/latest/search-guard-enterprise-edition?

Search Guard 5 does not require a license. We changed the package and license model from 5 to 6:

In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files:

Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key?

···

On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote:

https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules

SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated.

On Monday, February 18, 2019 at 5:48:18 PM UTC+1, plo...@redhat.com wrote:

Hi,

I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg_config https://docs.search-guard.com/latest/search-guard-enterprise-edition?

No, the license model is the same for SG5 and SG6. So also for SG5 enterprise, you need a license to run the modules in production. Other systems like PoC, Development, QA etc. were and will always be free of any charge. The main reason we introduced a “real” license for SG6 was that customers were sometimes confused if they operated the software legally and asked for a way to check their current license, runtime, renewal period etc. But this change had no effect on the overall licensing model.

···

On Monday, February 18, 2019 at 9:16:45 PM UTC+1, ploffay@redhat.com wrote:

On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote:

Search Guard 5 does not require a license. We changed the package and license model from 5 to 6:

In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files:

Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key?

https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules

SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated.

On Monday, February 18, 2019 at 5:48:18 PM UTC+1, plo...@redhat.com wrote:

Hi,

I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg_config https://docs.search-guard.com/latest/search-guard-enterprise-edition?

So am I right that the license for SG is virtual customers just pay but they don’t have to configure anything in order to use it. I am trying to figure out what is required to configure in order to use commercial SG modules.

···

On Tuesday, February 19, 2019 at 7:04:50 PM UTC+1, Jochen Kressin wrote:

No, the license model is the same for SG5 and SG6. So also for SG5 enterprise, you need a license to run the modules in production. Other systems like PoC, Development, QA etc. were and will always be free of any charge. The main reason we introduced a “real” license for SG6 was that customers were sometimes confused if they operated the software legally and asked for a way to check their current license, runtime, renewal period etc. But this change had no effect on the overall licensing model.

On Monday, February 18, 2019 at 9:16:45 PM UTC+1, plo...@redhat.com wrote:

On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote:

Search Guard 5 does not require a license. We changed the package and license model from 5 to 6:

In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files:

Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key?

https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules

SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated.

On Monday, February 18, 2019 at 5:48:18 PM UTC+1, plo...@redhat.com wrote:

Hi,

I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg_config https://docs.search-guard.com/latest/search-guard-enterprise-edition?

For SG5 you are right, the license is/was “virtual”.

For SG6, when you first install the plugin, we create a trial license for 60 days automatically. After that, you can either downgrade to the Community Edition, install a purchased Enterprise or Compliance license, or contact us for a trial license extension. You can install a license on a running cluster (no full or rolling restart necessary) by either using the REST API or by adding the license string to sg_config.yml.

···

On Tuesday, February 19, 2019 at 10:49:33 PM UTC+1, ploffay@redhat.com wrote:

So am I right that the license for SG is virtual customers just pay but they don’t have to configure anything in order to use it. I am trying to figure out what is required to configure in order to use commercial SG modules.

On Tuesday, February 19, 2019 at 7:04:50 PM UTC+1, Jochen Kressin wrote:

No, the license model is the same for SG5 and SG6. So also for SG5 enterprise, you need a license to run the modules in production. Other systems like PoC, Development, QA etc. were and will always be free of any charge. The main reason we introduced a “real” license for SG6 was that customers were sometimes confused if they operated the software legally and asked for a way to check their current license, runtime, renewal period etc. But this change had no effect on the overall licensing model.

On Monday, February 18, 2019 at 9:16:45 PM UTC+1, plo...@redhat.com wrote:

On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote:

Search Guard 5 does not require a license. We changed the package and license model from 5 to 6:

In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files:

Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key?

https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules

SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated.

On Monday, February 18, 2019 at 5:48:18 PM UTC+1, plo...@redhat.com wrote:

Hi,

I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg_config https://docs.search-guard.com/latest/search-guard-enterprise-edition?

Thanks for the clarification!

Can be the SG enterprise modules installed in Elasticsearch docker image and not be activated eg. not require enterprise license for users who are not using enterprise modules? Let’s say the Elasticsearch docker image contains all SG enterprise modules, some users will use only free OSS features and some enterprise.

···

On Tuesday, February 19, 2019 at 11:06:27 PM UTC+1, Jochen Kressin wrote:

For SG5 you are right, the license is/was “virtual”.

For SG6, when you first install the plugin, we create a trial license for 60 days automatically. After that, you can either downgrade to the Community Edition, install a purchased Enterprise or Compliance license, or contact us for a trial license extension. You can install a license on a running cluster (no full or rolling restart necessary) by either using the REST API or by adding the license string to sg_config.yml.

On Tuesday, February 19, 2019 at 10:49:33 PM UTC+1, plo...@redhat.com wrote:

So am I right that the license for SG is virtual customers just pay but they don’t have to configure anything in order to use it. I am trying to figure out what is required to configure in order to use commercial SG modules.

On Tuesday, February 19, 2019 at 7:04:50 PM UTC+1, Jochen Kressin wrote:

No, the license model is the same for SG5 and SG6. So also for SG5 enterprise, you need a license to run the modules in production. Other systems like PoC, Development, QA etc. were and will always be free of any charge. The main reason we introduced a “real” license for SG6 was that customers were sometimes confused if they operated the software legally and asked for a way to check their current license, runtime, renewal period etc. But this change had no effect on the overall licensing model.

On Monday, February 18, 2019 at 9:16:45 PM UTC+1, plo...@redhat.com wrote:

On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote:

Search Guard 5 does not require a license. We changed the package and license model from 5 to 6:

In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files:

Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key?

https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules

SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated.

On Monday, February 18, 2019 at 5:48:18 PM UTC+1, plo...@redhat.com wrote:

Hi,

I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg_config https://docs.search-guard.com/latest/search-guard-enterprise-edition?

Again this varies from SG5 to SG6.

For SG5 the answer is no. If the Enterprise modules are installed they are automatically activated. So for SG5 you would need 2 Docker images, one Enterprise and one pure OSS. (BTW: Support for ES5 will be discontinued with the arrival of ES7. ES5 has then officially reached EOL status at Elastic).

For SG6 the answer is yes. There is a switch in elasticearch.yml which turns off all Enterprise features and only runs the free Apach2 Community modules:

···

On Wednesday, February 20, 2019 at 9:22:21 AM UTC+1, ploffay@redhat.com wrote:

Thanks for the clarification!

Can be the SG enterprise modules installed in Elasticsearch docker image and not be activated eg. not require enterprise license for users who are not using enterprise modules? Let’s say the Elasticsearch docker image contains all SG enterprise modules, some users will use only free OSS features and some enterprise.

On Tuesday, February 19, 2019 at 11:06:27 PM UTC+1, Jochen Kressin wrote:

For SG5 you are right, the license is/was “virtual”.

For SG6, when you first install the plugin, we create a trial license for 60 days automatically. After that, you can either downgrade to the Community Edition, install a purchased Enterprise or Compliance license, or contact us for a trial license extension. You can install a license on a running cluster (no full or rolling restart necessary) by either using the REST API or by adding the license string to sg_config.yml.

On Tuesday, February 19, 2019 at 10:49:33 PM UTC+1, plo...@redhat.com wrote:

So am I right that the license for SG is virtual customers just pay but they don’t have to configure anything in order to use it. I am trying to figure out what is required to configure in order to use commercial SG modules.

On Tuesday, February 19, 2019 at 7:04:50 PM UTC+1, Jochen Kressin wrote:

No, the license model is the same for SG5 and SG6. So also for SG5 enterprise, you need a license to run the modules in production. Other systems like PoC, Development, QA etc. were and will always be free of any charge. The main reason we introduced a “real” license for SG6 was that customers were sometimes confused if they operated the software legally and asked for a way to check their current license, runtime, renewal period etc. But this change had no effect on the overall licensing model.

On Monday, February 18, 2019 at 9:16:45 PM UTC+1, plo...@redhat.com wrote:

On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote:

Search Guard 5 does not require a license. We changed the package and license model from 5 to 6:

In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files:

Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key?

https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules

SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated.

On Monday, February 18, 2019 at 5:48:18 PM UTC+1, plo...@redhat.com wrote:

Hi,

I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg_config https://docs.search-guard.com/latest/search-guard-enterprise-edition?