# Shield installation problem

**URL:** <https://discuss.elastic.co/t/shield-installation-problem/26707>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [August 3, 2015, 7:40am UTC](https://discuss.elastic.co/t/shield-installation-problem/26707 "2015-08-03T07:40:58Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [August 3, 2015, 7:40am UTC](https://discuss.elastic.co/t/shield-installation-problem/26707/1 "2015-08-03T07:40:58Z")

</div>

Hi there,

first time to try to install shield to elasticsearch, I used elasticsearch RPM to install elasticsearch, and then I install shield by this page steps ([https://www.elastic.co/guide/en/shield/current/installing-shield.html#offline-install](https://www.elastic.co/guide/en/shield/current/installing-shield.html#offline-install))

but when I'd restart elasticsearch, I found errors in logs, the content shown,

```
[2015-08-03 15:07:09,061][INFO][node] [elknode] version[1.6.0], pid[31829], build[cdd3ac4/2015-06-09T13:36:34Z]
[2015-08-03 15:07:09,062][INFO][node] [elknode] initializing ...
[2015-08-03 15:07:09,089][INFO][plugins] [elknode] loaded [shield], sites []
[2015-08-03 15:07:09,173][INFO][env] [elknode] using [1] data paths, mounts [[/ (/dev/mapper/vg_elkoin1-lv_root)]], net usable_space [40.5gb], net total_space [44.7gb], types [ext4]
[2015-08-03 15:07:09,240][ERROR][bootstrap] Exception
org.elasticsearch.ElasticsearchIllegalStateException: shield plugin requires the license plugin to be installed
        at org.elasticsearch.shield.license.LicenseModule.verifyLicensePlugin(LicenseModule.java:46)
        at org.elasticsearch.shield.license.LicenseModule.<init>(LicenseModule.java:33)
        at org.elasticsearch.shield.ShieldModule.spawnModules(ShieldModule.java:55)
        at org.elasticsearch.shield.support.AbstractShieldModule$Spawn.spawnModules(AbstractShieldModule.java:57)
        at org.elasticsearch.common.inject.ModulesBuilder.add(ModulesBuilder.java:44)
        at org.elasticsearch.common.inject.ModulesBuilder.add(ModulesBuilder.java:46)
        at org.elasticsearch.node.internal.InternalNode.<init>(InternalNode.java:177)
        at org.elasticsearch.node.NodeBuilder.build(NodeBuilder.java:159)
        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:77)
        at org.elasticsearch.bootstrap.Bootstrap.main(Bootstrap.java:245)
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:32)

```

Seems I miss something to install like license? but I don't find out elasticsearch/license, any idea?

btw, I have 2 elasticsearch node (1master 1node), if I enable shield on elasticsearch master to protect elasticsearch, do I set anything on elasticsearch node?

Jason

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 3, 2015, 7:47am UTC](https://discuss.elastic.co/t/shield-installation-problem/26707/2 "2015-08-03T07:47:59Z")

</div>

Yes you need the license plugin as well as the Shield one, you can get that with `wget https://download.elastic.co/elasticsearch/license/license-1.0.0.zip`.

Shield does need to be installed on _all_ nodes in the cluster, this includes master, data and client nodes.

---

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [August 3, 2015, 9:36am UTC](https://discuss.elastic.co/t/shield-installation-problem/26707/3 "2015-08-03T09:36:13Z")

</div>

Hi Mark,

Thanks very much, it works fine

So the access control tools like Shield, which is production level tool? Only can be used 30 days in trial edition? if it expired later and I didn't update the license, does not it work normally or shall I remove Shield plugin?

Jason

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 3, 2015, 10:25am UTC](https://discuss.elastic.co/t/shield-installation-problem/26707/4 "2015-08-03T10:25:04Z")

</div>

The trial is only for 30 days, yes. If it expires then we restrict access to certain APIs but you can still access your data.

---

<div class="post-metadata">

**Author:** ![skearns](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skearns/32/125945_2.png) [@skearns](https://discuss.elastic.co/u/skearns)\
**Post date:** [August 3, 2015, 6:24pm UTC](https://discuss.elastic.co/t/shield-installation-problem/26707/5 "2015-08-03T18:24:53Z")

</div>

Hi Jason,

To be clear, we outline the full behavior in our docs here [1]. While we do restrict access to the health and stats APIs if your Shield license expires, the search and indexing APIs continue to operate and we do not disable your security settings. If you need a trial license extension, just send an email to info@elastic.co and we can send you one.

Thanks,  
Steve

[1] [https://www.elastic.co/guide/en/shield/current/license-management.html#license-expiration](https://www.elastic.co/guide/en/shield/current/license-management.html#license-expiration)

---

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [October 15, 2015, 4:23am UTC](https://discuss.elastic.co/t/shield-installation-problem/26707/6 "2015-10-15T04:23:59Z")

</div>

Hi Steve,

After the license expired,

$curl -u es\_admin:iiiiii '[http://localhost:9200/\_cat/indices?v](http://localhost:9200/_cat/indices?v)'  
{"error":"LicenseExpiredException[license expired for feature [shield]]","status":401}

as you said, the indexing APIs continue to operate, but it seems to doesn't work??

How should I keep my elasticsearch work normally if I don't want to extend license?

Jason

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 15, 2015, 4:29am UTC](https://discuss.elastic.co/t/shield-installation-problem/26707/7 "2015-10-15T04:29:05Z")

</div>

You either need to subscribe to one of our support offerings to get a full license for Shield, or uninstall it from your nodes.

---

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [October 15, 2015, 4:31am UTC](https://discuss.elastic.co/t/shield-installation-problem/26707/8 "2015-10-15T04:31:44Z")

</div>

Hi Mark,

How to remove license plugin? I cannot found it on [https://www.elastic.co/guide/en/shield/current/license-management.html](https://www.elastic.co/guide/en/shield/current/license-management.html)

Jason

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 15, 2015, 4:38am UTC](https://discuss.elastic.co/t/shield-installation-problem/26707/9 "2015-10-15T04:38:42Z")

</div>

`sudo bin/plugin -r shield sudo bin/plugin -r license`

I'll make a note to get that documented 🙂

---

<div class="post-metadata">

**Author:** ![Jason\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_zheng/32/4041_2.png) [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Post date:** [October 15, 2015, 7:43am UTC](https://discuss.elastic.co/t/shield-installation-problem/26707/10 "2015-10-15T07:43:07Z")

</div>

Hi Mark,

Thanks, it can be work now

Jason

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:48pm UTC](https://discuss.elastic.co/t/shield-installation-problem/26707/11 "2017-07-06T13:48:14Z")

</div>


