# How to install enterprise license for SearchGuard 5 **URL:** \ **Category:** Search Guard\ **Created:** [February 18, 2019, 4:48pm UTC](https://forum.search-guard.com/t/how-to-install-enterprise-license-for-searchguard-5/1337 "2019-02-18T16:48:18Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![ploffay](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/ploffay/32/626_2.png) [@ploffay](https://forum.search-guard.com/u/ploffay)\ **Post date:** [February 18, 2019, 4:48pm UTC](https://forum.search-guard.com/t/how-to-install-enterprise-license-for-searchguard-5/1337/1 "2019-02-18T16:48:18Z")
Hi, I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg\_config [Enterprise Edition | Security for Elasticsearch | Search Guard](https://docs.search-guard.com/latest/search-guard-enterprise-edition)? ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [February 18, 2019, 5:09pm UTC](https://forum.search-guard.com/t/how-to-install-enterprise-license-for-searchguard-5/1337/2 "2019-02-18T17:09:59Z")
Search Guard 5 does not require a license. We changed the package and license model from 5 to 6: In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files: > **[Search Guard Documentation 404](https://docs.search-guard.com/latest/404.html)** > > Seems like the page you are looking for does not exist. We deeply and humbly apologize. SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated. > **···** > > On Monday, February 18, 2019 at 5:48:18 PM UTC+1, [ploffay@redhat.com](mailto:ploffay@redhat.com) wrote: > > > Hi, > > > I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg\_config [https://docs.search-guard.com/latest/search-guard-enterprise-edition](https://docs.search-guard.com/latest/search-guard-enterprise-edition)? ---
**Author:** ![ploffay](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/ploffay/32/626_2.png) [@ploffay](https://forum.search-guard.com/u/ploffay)\ **Post date:** [February 18, 2019, 8:16pm UTC](https://forum.search-guard.com/t/how-to-install-enterprise-license-for-searchguard-5/1337/3 "2019-02-18T20:16:44Z")
> Search Guard 5 does not require a license. We changed the package and license model from 5 to 6: > In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files: Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key? > **···** > > On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote: > > > > > > [https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules](https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules) > > > > > > SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated. > > > > On Monday, February 18, 2019 at 5:48:18 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > Hi, > > > > I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg\_config [https://docs.search-guard.com/latest/search-guard-enterprise-edition](https://docs.search-guard.com/latest/search-guard-enterprise-edition)? ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [February 19, 2019, 6:04pm UTC](https://forum.search-guard.com/t/how-to-install-enterprise-license-for-searchguard-5/1337/4 "2019-02-19T18:04:50Z")
No, the license model is the same for SG5 and SG6. So also for SG5 enterprise, you need a license to run the modules in production. Other systems like PoC, Development, QA etc. were and will always be free of any charge. The main reason we introduced a “real” license for SG6 was that customers were sometimes confused if they operated the software legally and asked for a way to check their current license, runtime, renewal period etc. But this change had no effect on the overall licensing model. > **···** > > On Monday, February 18, 2019 at 9:16:45 PM UTC+1, [ploffay@redhat.com](mailto:ploffay@redhat.com) wrote: > > > On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote: > > > > > Search Guard 5 does not require a license. We changed the package and license model from 5 to 6: > > > > In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files: > > > > > > Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key? > > > > > > > > [https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules](https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules) > > > > > > > > SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated. > > > > > > On Monday, February 18, 2019 at 5:48:18 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > > > Hi, > > > > > I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg\_config [https://docs.search-guard.com/latest/search-guard-enterprise-edition](https://docs.search-guard.com/latest/search-guard-enterprise-edition)? ---
**Author:** ![ploffay](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/ploffay/32/626_2.png) [@ploffay](https://forum.search-guard.com/u/ploffay)\ **Post date:** [February 19, 2019, 9:49pm UTC](https://forum.search-guard.com/t/how-to-install-enterprise-license-for-searchguard-5/1337/5 "2019-02-19T21:49:33Z")
So am I right that the license for SG is virtual customers just pay but they don’t have to configure anything in order to use it. I am trying to figure out what is required to configure in order to use commercial SG modules. > **···** > > On Tuesday, February 19, 2019 at 7:04:50 PM UTC+1, Jochen Kressin wrote: > > > No, the license model is the same for SG5 and SG6. So also for SG5 enterprise, you need a license to run the modules in production. Other systems like PoC, Development, QA etc. were and will always be free of any charge. The main reason we introduced a “real” license for SG6 was that customers were sometimes confused if they operated the software legally and asked for a way to check their current license, runtime, renewal period etc. But this change had no effect on the overall licensing model. > > > > On Monday, February 18, 2019 at 9:16:45 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote: > > > > > > > Search Guard 5 does not require a license. We changed the package and license model from 5 to 6: > > > > > In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files: > > > > > > > > Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key? > > > > > > > > > > [https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules](https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules) > > > > > > > > > > SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated. > > > > > > > > On Monday, February 18, 2019 at 5:48:18 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > > > > > Hi, > > > > > > I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg\_config [https://docs.search-guard.com/latest/search-guard-enterprise-edition](https://docs.search-guard.com/latest/search-guard-enterprise-edition)? ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [February 19, 2019, 10:06pm UTC](https://forum.search-guard.com/t/how-to-install-enterprise-license-for-searchguard-5/1337/6 "2019-02-19T22:06:26Z")
For SG5 you are right, the license is/was “virtual”. For SG6, when you first install the plugin, we create a trial license for 60 days automatically. After that, you can either downgrade to the Community Edition, install a purchased Enterprise or Compliance license, or contact us for a trial license extension. You can install a license on a running cluster (no full or rolling restart necessary) by either using the REST API or by adding the license string to sg\_config.yml. > **···** > > On Tuesday, February 19, 2019 at 10:49:33 PM UTC+1, [ploffay@redhat.com](mailto:ploffay@redhat.com) wrote: > > > So am I right that the license for SG is virtual customers just pay but they don’t have to configure anything in order to use it. I am trying to figure out what is required to configure in order to use commercial SG modules. > > > > On Tuesday, February 19, 2019 at 7:04:50 PM UTC+1, Jochen Kressin wrote: > > > > > No, the license model is the same for SG5 and SG6. So also for SG5 enterprise, you need a license to run the modules in production. Other systems like PoC, Development, QA etc. were and will always be free of any charge. The main reason we introduced a “real” license for SG6 was that customers were sometimes confused if they operated the software legally and asked for a way to check their current license, runtime, renewal period etc. But this change had no effect on the overall licensing model. > > > > > > On Monday, February 18, 2019 at 9:16:45 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > > > On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote: > > > > > > > > > Search Guard 5 does not require a license. We changed the package and license model from 5 to 6: > > > > > > In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files: > > > > > > > > > > Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key? > > > > > > > > > > > > [https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules](https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules) > > > > > > > > > > > > SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated. > > > > > > > > > > On Monday, February 18, 2019 at 5:48:18 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > > > > > > > Hi, > > > > > > > I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg\_config [https://docs.search-guard.com/latest/search-guard-enterprise-edition](https://docs.search-guard.com/latest/search-guard-enterprise-edition)? ---
**Author:** ![ploffay](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/ploffay/32/626_2.png) [@ploffay](https://forum.search-guard.com/u/ploffay)\ **Post date:** [February 20, 2019, 8:22am UTC](https://forum.search-guard.com/t/how-to-install-enterprise-license-for-searchguard-5/1337/7 "2019-02-20T08:22:20Z")
Thanks for the clarification! Can be the SG enterprise modules installed in Elasticsearch docker image and not be activated eg. not require enterprise license for users who are not using enterprise modules? Let’s say the Elasticsearch docker image contains all SG enterprise modules, some users will use only free OSS features and some enterprise. > **···** > > On Tuesday, February 19, 2019 at 11:06:27 PM UTC+1, Jochen Kressin wrote: > > > For SG5 you are right, the license is/was “virtual”. > > > > For SG6, when you first install the plugin, we create a trial license for 60 days automatically. After that, you can either downgrade to the Community Edition, install a purchased Enterprise or Compliance license, or contact us for a trial license extension. You can install a license on a running cluster (no full or rolling restart necessary) by either using the REST API or by adding the license string to sg\_config.yml. > > > > On Tuesday, February 19, 2019 at 10:49:33 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > So am I right that the license for SG is virtual customers just pay but they don’t have to configure anything in order to use it. I am trying to figure out what is required to configure in order to use commercial SG modules. > > > > > > On Tuesday, February 19, 2019 at 7:04:50 PM UTC+1, Jochen Kressin wrote: > > > > > > > No, the license model is the same for SG5 and SG6. So also for SG5 enterprise, you need a license to run the modules in production. Other systems like PoC, Development, QA etc. were and will always be free of any charge. The main reason we introduced a “real” license for SG6 was that customers were sometimes confused if they operated the software legally and asked for a way to check their current license, runtime, renewal period etc. But this change had no effect on the overall licensing model. > > > > > > > > On Monday, February 18, 2019 at 9:16:45 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > > > > > On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote: > > > > > > > > > > > Search Guard 5 does not require a license. We changed the package and license model from 5 to 6: > > > > > > > In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files: > > > > > > > > > > > > Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key? > > > > > > > > > > > > > > [https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules](https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules) > > > > > > > > > > > > > > SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated. > > > > > > > > > > > > On Monday, February 18, 2019 at 5:48:18 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > > > > > > > > > Hi, > > > > > > > > I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg\_config [https://docs.search-guard.com/latest/search-guard-enterprise-edition](https://docs.search-guard.com/latest/search-guard-enterprise-edition)? ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [February 20, 2019, 2:24pm UTC](https://forum.search-guard.com/t/how-to-install-enterprise-license-for-searchguard-5/1337/8 "2019-02-20T14:24:40Z")
Again this varies from SG5 to SG6. For SG5 the answer is no. If the Enterprise modules are installed they are automatically activated. So for SG5 you would need 2 Docker images, one Enterprise and one pure OSS. (BTW: Support for ES5 will be discontinued with the arrival of ES7. ES5 has then officially reached EOL status at Elastic). For SG6 the answer is yes. There is a switch in elasticearch.yml which turns off all Enterprise features and only runs the free Apach2 Community modules: > **[Community Edition](https://docs.search-guard.com/latest/search-guard-community-edition)** > > The Search Guard Community Edition provides TLS encryption and index-level permissions on REST and transport for free. > **···** > > On Wednesday, February 20, 2019 at 9:22:21 AM UTC+1, [ploffay@redhat.com](mailto:ploffay@redhat.com) wrote: > > > Thanks for the clarification! > > > > > > Can be the SG enterprise modules installed in Elasticsearch docker image and not be activated eg. not require enterprise license for users who are not using enterprise modules? Let’s say the Elasticsearch docker image contains all SG enterprise modules, some users will use only free OSS features and some enterprise. > > > > > > On Tuesday, February 19, 2019 at 11:06:27 PM UTC+1, Jochen Kressin wrote: > > > > > For SG5 you are right, the license is/was “virtual”. > > > > > > For SG6, when you first install the plugin, we create a trial license for 60 days automatically. After that, you can either downgrade to the Community Edition, install a purchased Enterprise or Compliance license, or contact us for a trial license extension. You can install a license on a running cluster (no full or rolling restart necessary) by either using the REST API or by adding the license string to sg\_config.yml. > > > > > > On Tuesday, February 19, 2019 at 10:49:33 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > > > So am I right that the license for SG is virtual customers just pay but they don’t have to configure anything in order to use it. I am trying to figure out what is required to configure in order to use commercial SG modules. > > > > > > > > On Tuesday, February 19, 2019 at 7:04:50 PM UTC+1, Jochen Kressin wrote: > > > > > > > > > No, the license model is the same for SG5 and SG6. So also for SG5 enterprise, you need a license to run the modules in production. Other systems like PoC, Development, QA etc. were and will always be free of any charge. The main reason we introduced a “real” license for SG6 was that customers were sometimes confused if they operated the software legally and asked for a way to check their current license, runtime, renewal period etc. But this change had no effect on the overall licensing model. > > > > > > > > > > On Monday, February 18, 2019 at 9:16:45 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > > > > > > > On Monday, February 18, 2019 at 6:09:59 PM UTC+1, Jochen Kressin wrote: > > > > > > > > > > > > > Search Guard 5 does not require a license. We changed the package and license model from 5 to 6: > > > > > > > > In SG5, the plugin zip does not contain any Enterprise modules. In order to use Enterprise features, you need to download the respective jar files: > > > > > > > > > > > > > > Are the enterprise features in SG 5 free of charge? Users don’t have to provide any license key? > > > > > > > > > > > > > > > > [https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules](https://docs.search-guard.com/v5/search-guard-installation#installing-enterprise-modules) > > > > > > > > > > > > > > > > SG6 comes pre-packaged with all Enterprise and Compliance modules, and the license determines which modules get activated. > > > > > > > > > > > > > > On Monday, February 18, 2019 at 5:48:18 PM UTC+1, [plo...@redhat.com](mailto:plo...@redhat.com) wrote: > > > > > > > > > > > > > > > Hi, > > > > > > > > > I would like to know what configuration is required to install enterprise license of SearchGuard 5.x. Is it similar as for 6.x - to install the license token in sg\_config [https://docs.search-guard.com/latest/search-guard-enterprise-edition](https://docs.search-guard.com/latest/search-guard-enterprise-edition)?