# Implementing shield in multi node cluster

**URL:** <https://discuss.elastic.co/t/implementing-shield-in-multi-node-cluster/59739>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [September 3, 2016, 10:29pm UTC](https://discuss.elastic.co/t/implementing-shield-in-multi-node-cluster/59739 "2016-09-03T22:29:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sampathkumar23](https://avatars.discourse-cdn.com/v4/letter/s/2acd7d/32.png) [@sampathkumar23](https://discuss.elastic.co/u/sampathkumar23)\
**Post date:** [September 3, 2016, 10:29pm UTC](https://discuss.elastic.co/t/implementing-shield-in-multi-node-cluster/59739/1 "2016-09-03T22:29:26Z")

</div>

We already have a cluster with 3 master nodes , 5 data nodes, 3 client nodes, 1 node for monitoring(kibana and marvel to monitor the cluster - not part of the cluster ). We currently don't have shield. We are planning to implement Shield. For now, we are planning to use only basic auth. Just create a admin and user role and share the user basic auth credentials to teams that consume the data in elastic search(so that they can make only GET calls). We will keep the admin credentials within a closed group. Can someone please me understand which nodes require shield installation and what are the factors / attributes that have to be considered?

Thanks,  
Sam

---

<div class="post-metadata">

**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\
**Post date:** [September 3, 2016, 11:43pm UTC](https://discuss.elastic.co/t/implementing-shield-in-multi-node-cluster/59739/2 "2016-09-03T23:43:42Z")

</div>

Hi Sam,

Glad to hear youre planning to use Shield! You will need to install Shield  
on all nodes in the cluster, amd set up the two users. Also, you can (and  
should) enable SSL/TLS when you go to production. I suggest following our  
getting started guide in the docs:

[https://www.elastic.co/guide/en/shield/current/getting-started.html](https://www.elastic.co/guide/en/shield/current/getting-started.html)

If you have specific questions, feel free to ask in this forum, but if  
you'd like to talk with a person, feel free to reach out to [sales@elastic.co](mailto:sales@elastic.co)!

Thanks,  
Steve

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:41pm UTC](https://discuss.elastic.co/t/implementing-shield-in-multi-node-cluster/59739/3 "2017-07-06T13:41:58Z")

</div>


