# Install Community Version

**URL:** <https://forum.search-guard.com/t/install-community-version/1483>\
**Category:** Search Guard\
**Created:** [May 9, 2019, 9:05am UTC](https://forum.search-guard.com/t/install-community-version/1483 "2019-05-09T09:05:21Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://forum.search-guard.com/u/Richie)\
**Post date:** [May 9, 2019, 9:05am UTC](https://forum.search-guard.com/t/install-community-version/1483/1 "2019-05-09T09:05:22Z")

</div>

Hey, I am very new to Search Guard and I was wondering how to install the community version. I installed the demo version and it worked perfectly. However it comes with a 60 day trial. It says in the official documentation to install the Enterprise version first and then disable the Enterprise modules to obtain the Community version. Do I need to contact Search Guard support or is their open source zip files to download? Forgive me, I am a true novice with this 🙂

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [May 9, 2019, 9:38am UTC](https://forum.search-guard.com/t/install-community-version/1483/2 "2019-05-09T09:38:41Z")

</div>

No, you do not need to contact us at all for the Community edition.

We only provide one download, with all Community and Enterprise features enabled, there is no separate Community download. You can find all version here:

SG7 for ES7:

> **[Latest Releases](https://docs.search-guard.com/latest/search-guard-versions)**
>
> A list of the current Search Guard releases for all Elasticsearch 7 and Kibana 7 versions.

SG6 for ES6:

> **[Latest Releases](https://docs.search-guard.com/6.x-25/search-guard-versions)**
>
> A list of the current Search Guard releases for all Elasticsearch 7 and Kibana 7 versions.

If you want to run the Community edition only, then just disable the enterprise features in elasticsearch.yml and you are good to go:

> **[Community Edition](https://docs.search-guard.com/latest/search-guard-community-edition#overview)**
>
> The Search Guard Community Edition provides TLS encryption and index-level permissions on REST and transport for free.

Admitted, we could make that a bit more obvious in the docs.

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [May 9, 2019, 9:38am UTC](https://forum.search-guard.com/t/install-community-version/1483/3 "2019-05-09T09:38:47Z")

</div>



---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://forum.search-guard.com/u/Richie)\
**Post date:** [May 9, 2019, 10:22am UTC](https://forum.search-guard.com/t/install-community-version/1483/4 "2019-05-09T10:22:10Z")

</div>

Thank you for clarifying this for me Jochen. I disabled the enterprise modules connected to my original install. I’d imagine any config changes now must be done via the config files i.e. add user, permissions to create dashboards etc?

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [May 9, 2019, 10:33am UTC](https://forum.search-guard.com/t/install-community-version/1483/5 "2019-05-09T10:33:25Z")

</div>

Yes, this is correct. You need to change the config files, and then upload the changes via the sgadmin tool.

Search Guard keeps all configuration settings in an Elasticsearch index. This enables configuration hot-reloading, so you can make changes without the need to restart your cluster and without the need to keep config files in sync on your nodes.

If you have used the demo installer, then you will find an _sgadmin\_demo.sh_ script in the tools folder. This is a pre-configured sgadmin call with all command line switches already set. It will populate the SG index with the files in the sgconfig directory.

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://forum.search-guard.com/u/Richie)\
**Post date:** [May 9, 2019, 11:27am UTC](https://forum.search-guard.com/t/install-community-version/1483/6 "2019-05-09T11:27:19Z")

</div>

Yes I understand. I executed the sgadmin command to see if the works as expected and it does thankfully. The next challenge will be to configure the .yml files. is there any guides on how to add internal users, map roles etc.

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [May 9, 2019, 11:36am UTC](https://forum.search-guard.com/t/install-community-version/1483/7 "2019-05-09T11:36:57Z")

</div>

We are in the process of publishing a “First Steps” section on the docs, but this will take another couple of days.

There is a comprehensive, but also rather long article out there written by a SG user:

> **[ElasticSearch Security - Installing And Configuring Search-Guard How-To -...](https://gryzli.info/2018/12/01/elasticsearchelk-stack-security-howto/)**
>
> This How-To will guide you through securing your cluster including: Encryption , Authentication, Authorization. Having different users and user roles.

Basically what you need to do is (all links here are for SG7, if you use SG6 please choose the correct version in the docs. The config format differs slightly between 6 and 7):

- Add users to sg\_internal\_users.yml file
- Generate a hashed password for each user

> **[Internal users database](https://docs.search-guard.com/latest/internal-users-database)**
>
> How to store and manage Search Guard users directly in Elasticsearch by using the Internal Users Database.

- Define your roles in sg\_roles.yml:

> **[Search Guard roles](https://docs.search-guard.com/latest/roles-permissions)**
>
> How to define role based access to Elasticsearch on index level with Search Guard.

- Map the users created in the first step to the roles you created in the second step:

> **[Mapping users to Search Guard roles](https://docs.search-guard.com/latest/mapping-users-roles)**
>
> How to map users and backend roles to Search Guard roles to implement flexible access control to an Elasticsearch cluster.

You can check that the users, roles and mappings are correct by following this guide:

> **[User and roles troubleshooting](https://docs.search-guard.com/latest/troubleshooting-search-guard-user-roles)**
>
> How to troubleshoot problems with users and roles in an Search Guard secured Elasticsearch cluster.

And finally, if you run into problems with setting the correct permissions for your role(s), we have this troubleshooting guide here:

> **[Permissions troubleshooting](https://docs.search-guard.com/latest/troubleshooting-search-guard-permission)**
>
> Step-by-step instructions on how to troubleshoot issues with Search Guard roles and permissions.

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://forum.search-guard.com/u/Richie)\
**Post date:** [May 9, 2019, 11:56am UTC](https://forum.search-guard.com/t/install-community-version/1483/8 "2019-05-09T11:56:17Z")

</div>

Thanks Jochen 😄

---

<div class="post-metadata">

**Author:** ![Richie](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@Richie](https://forum.search-guard.com/u/Richie)\
**Post date:** [May 9, 2019, 2:40pm UTC](https://forum.search-guard.com/t/install-community-version/1483/9 "2019-05-09T14:40:05Z")

</div>

Hey Jochen, I am able to create users, map to roles and have dashboards only in place for kibana users. Is there any way to set specific dashboards to specific users? This is the last piece of functionality I need!! can you point me in the right direction?

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [May 10, 2019, 1:49pm UTC](https://forum.search-guard.com/t/install-community-version/1483/10 "2019-05-10T13:49:13Z")

</div>

Answered here: [Specific Dashboards for specific users - #5 by Richie](https://forum.search-guard.com/t/specific-dashboards-for-specific-users/1490/5)

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [May 10, 2019, 1:49pm UTC](https://forum.search-guard.com/t/install-community-version/1483/11 "2019-05-10T13:49:16Z")

</div>


