Skip to content

Commit 8378ea2

Browse files
authored
[DOCS] Updates to the Getting started with security tutorial (#329)
1 parent 3e5653e commit 8378ea2

File tree

3 files changed

+31
-22
lines changed

3 files changed

+31
-22
lines changed

docs/en/stack/security/get-started-enable-security.asciidoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
1-
When you use the trial license, the {es} {security-features} are disabled by
2-
default. To enable them:
1+
When you use the basic and trial licenses, the {es} {security-features} are
2+
disabled by default. To enable them:
33

44
. Stop {kib}. The method for starting and stopping {kib} varies depending on
55
how you installed it. For example, if you installed {kib} from an archive

docs/en/stack/security/get-started-security.asciidoc

Lines changed: 16 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -24,11 +24,16 @@ running.
2424
. Launch the {kib} web interface by pointing your browser to port 5601. For
2525
example, http://127.0.0.1:5601[http://127.0.0.1:5601].
2626

27-
[role="xpack"]
28-
[[get-started-license]]
29-
=== Install a trial license
30-
31-
include::{docdir}/get-started-trial.asciidoc[]
27+
. Verify that you are using a license that includes the role-based access
28+
control (RBAC) and native authentication {security-features}. To view your
29+
license in {kib}, go to **Management** and click **License Management**.
30+
+
31+
--
32+
By default, when you install {stack} products, they apply basic licenses
33+
with no expiration dates. To complete this tutorial, you must have a basic or
34+
trial license at a minimum. For more information, see {subscriptions} and
35+
<<license-management>>.
36+
--
3237

3338
[role="xpack"]
3439
[[get-started-enable-security]]
@@ -141,10 +146,9 @@ Go to the *Management / Security / Roles* page to see them:
141146
[role="screenshot"]
142147
image::security/images/management-roles.jpg["Role management screenshot in Kibana"]
143148

144-
Select a role to see more information about its privileges. For example, if you
145-
select the `kibana_user` role, you will see that it grants `manage`, `read`,
146-
`index`, and `delete` privileges on the `.kibana*` indices. To learn more about
147-
these privileges, see <<privileges-list-indices>>.
149+
Select a role to see more information about its privileges. For example, select
150+
the `kibana_system` role to see its list of cluster and index privileges. To
151+
learn more, see <<privileges-list-indices>>.
148152

149153
Let's assign the `kibana_user` role to your user. Go back to the
150154
*Management / Security / Users* page and select your user. Add the `kibana_user`
@@ -328,12 +332,9 @@ Congratulations! You've successfully set up authentication and authorization by
328332
using the native realm. You learned how to create user IDs and roles that
329333
prevent unauthorized access to the {stack}.
330334

331-
Next, you'll want to try other features that are unlocked by your trial license,
332-
such as {ml}. See <<ml-getting-started,Getting started with {ml}>>.
333-
334-
Later, when you're ready to increase the number of nodes in your cluster or set
335-
up an production environment, you'll want to encrypt communications across the
336-
{stack}. To learn how, read <<encrypting-communications>>.
335+
Later, when you're ready to increase the number of nodes in your cluster, you'll
336+
want to encrypt communications across the {stack}. To learn how, read
337+
<<encrypting-communications>>.
337338

338339
For more detailed information about securing the {stack}, see:
339340

docs/en/stack/security/securing-communications/tutorial-tls-intro.asciidoc

Lines changed: 13 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,10 +3,9 @@
33
[[encrypting-internode-communications]]
44
== Tutorial: Encrypting communications
55

6-
In 6.0 and later releases, if you have a gold or higher license and the {es}
7-
{security-features} are enabled, you must use Transport Layer Security (TLS) to
8-
encrypt internode communication. In this tutorial, you learn how to meet the
9-
minimum requirements to pass the
6+
When you enable {es} {security-features}, unless you have a trial license, you
7+
must use Transport Layer Security (TLS) to encrypt internode communication.
8+
In this tutorial, you learn how to meet the minimum requirements to pass the
109
{ref}/bootstrap-checks-xpack.html#bootstrap-checks-tls[TLS bootstrap check].
1110

1211
NOTE: Single-node clusters that use a loopback interface do not have this
@@ -27,7 +26,16 @@ described in
2726
particular, this tutorial provides instructions that work with the `zip` and
2827
`tar.gz` packages.
2928

30-
. <<get-started-license,Install a trial license>>.
29+
. Verify that you are using a license that includes the encrypted communications
30+
{security-features}. To view your license in {kib}, go to *Management* and click
31+
*License Management*.
32+
+
33+
--
34+
By default, when you install {stack} products, they apply basic licenses with no
35+
expiration dates. To complete this tutorial, you must have a basic or trial
36+
license at a minimum. For more information, see {subscriptions} and
37+
<<license-management>>.
38+
--
3139

3240
. <<get-started-enable-security,Enable the {es} {security-features}>>.
3341

0 commit comments

Comments
 (0)