# How does the X-Pack license work?

**URL:** <https://discuss.elastic.co/t/how-does-the-x-pack-license-work/153256>\
**Category:** Elasticsearch\
**Created:** [October 20, 2018, 7:53pm UTC](https://discuss.elastic.co/t/how-does-the-x-pack-license-work/153256 "2018-10-20T19:53:46Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![KajMagnus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kajmagnus/32/142465_2.png) [@KajMagnus](https://discuss.elastic.co/u/KajMagnus)\
**Post date:** [October 20, 2018, 7:53pm UTC](https://discuss.elastic.co/t/how-does-the-x-pack-license-work/153256/1 "2018-10-20T19:53:46Z")

</div>

Can I ask how does the X-Pack license work? Is there perhaps an asymmetric encryption public key bundled with ElasticSearch? And if one buys an enterprise plan subscription, then Elastic-the-company creates a license, and signs with a private key? And the ElasticSearch software uses the built-in public key to verify that the license is valid? (i.e. signed by Elastic-the-Company's private key)

Or does the license and signature work, in some other way?

Theoretically, people could fork the ElasticSearch repo, edit the public key (assuming there is one?) so they can sign licenses with their own private key? Or they could edit the source code and remove various checks that tests if there's a licence or not? ... And companies don't do that, for many reasons, like 1) it's illegal. 2) It's maybe not well-spent-time: the company's engineers can create more value for the company, by spending time on other things than hacking each new releases of X-Pack. And 3) it'd lower morale inside the company, if the employees notice that their employer does things like that? (Or what are your thoughts? If it's ok that I ask things like these)

---

<div class="post-metadata">

**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\
**Post date:** [October 22, 2018, 12:46pm UTC](https://discuss.elastic.co/t/how-does-the-x-pack-license-work/153256/2 "2018-10-22T12:46:33Z")

</div>

Hi Kaj,

This sounds like a legal licensing question, rather than a technical question. The Elastic License pretty clearly states "do not hack the licensing mechanism." If you have any questions about what that means or there is anything we can do to clarify the intent and meaning for your use-case specifically, please reach out to us at [elastic\_license@elastic.co](mailto:elastic_license@elastic.co)

Thanks,  
Steve

---

<div class="post-metadata">

**Author:** ![KajMagnus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kajmagnus/32/142465_2.png) [@KajMagnus](https://discuss.elastic.co/u/KajMagnus)\
**Post date:** [October 22, 2018, 1:23pm UTC](https://discuss.elastic.co/t/how-does-the-x-pack-license-work/153256/3 "2018-10-22T13:23:26Z")

</div>

Hi Steve, thanks for the reply. Actually, the reason I'm asking is primarily technical. Maybe I should have explained why I asked:

I'm thinking about doing the same thing, as Elastic is doing with ElasticSearch + x-pack, with my software project. It's open source (linked via my profile), and I'm thinking about adding an "enterprise-addons" directory, like you have added the "x-pack" directory. ...

... So that large companies and enterprises, could pay a license fee, to use the enterprise-addons. Whilst small business and hobbyists, have all they need already, without any enterprise-addons.

Not sure if it makes sense for you to spend time answering this; maybe my question / thoughts are a bit off-topic.

(I otherwise use ES in fairly basic ways. The open-source parts are more than what I need already; there's just a single node.)

---

<div class="post-metadata">

**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\
**Post date:** [October 22, 2018, 3:20pm UTC](https://discuss.elastic.co/t/how-does-the-x-pack-license-work/153256/4 "2018-10-22T15:20:36Z")

</div>

Ah, I see what you're after now. I'd be happy to chat about your planned approach - while there are very important technical aspects to how to implement things like license key enforcement, I expect the majority of the conversation would be around your business goals, and how to structure things to best align your goals with those of your users and your customers.

Feel free to send me a DM - happy to help if I can.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 19, 2018, 3:20pm UTC](https://discuss.elastic.co/t/how-does-the-x-pack-license-work/153256/5 "2018-11-19T15:20:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
