yexinru/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
Files
a41a4e0331fbc0beff63bb28fa59228cc9a751df
doc-exports/docs/css/umn/css_01_0310.html
zhengxiu 93d856d5c5 css umn 25.6.0 version 
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com>
Co-authored-by: zhengxiu <zhengxiu@huawei.com>
Co-committed-by: zhengxiu <zhengxiu@huawei.com>
2025-11-25 11:34:43 +00:00

219 lines
43 KiB
HTML
Raw Blame History

<a name="EN-US_TOPIC_0000001992205853"></a><a name="EN-US_TOPIC_0000001992205853"></a>
<h1 class="topictitle1">Changing the Security Mode of an OpenSearch Cluster</h1>
<div id="body0000001992205853"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_p19544632102712">With CSS, when an OpenSearch cluster's security needs change, you can change its security mode settings.</p>
<div class="p" id="EN-US_TOPIC_0000001992205853__p883172115487">Configure the security mode based on the security needs of your cluster.<div class="caution" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_note794713619218"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_p8274433284">HTTPS access can be disabled only for OpenSearch 1.3.6 and 2.19.0 security-mode clusters. For other versions, HTTPS access is forcibly enabled and cannot be disabled.</p>
</div></div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001410060261_table198661437165914" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Cluster security modes</caption><thead align="left"><tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_row1882494514112"><th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.2.2.2.5.1.1"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_p0824145101119">Cluster Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.2.2.5.1.2"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_p10508852201018">Key Settings</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="35%" id="mcps1.3.2.2.2.5.1.3"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_p3824545161116">Description</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="35%" id="mcps1.3.2.2.2.5.1.4"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_p19824184571117">Applicable Scenario</p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_row382415456118"><td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.2.2.2.5.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_p154179414203">Non-security mode cluster</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.2.2.5.1.2 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_p942612473568"><span class="parmname" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_parmname6214191113579"><b>Security Mode</b></span>: disabled</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.2.2.2.5.1.3 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_p12824114561119">Access to such a cluster requires no user authentication, and data will be transmitted in plaintext using HTTP.</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.2.2.2.5.1.4 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_p2083415404719">Use when creating a cluster for internal testing or workloads that have a low security standard.</p>
<ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_ul87801447174218"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_li978074716423">Advantage: easy to access the cluster.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_li1878011473427">Disadvantage: poor security, as anyone can access the cluster. When the security mode is disabled, public network access and Kibana public network access cannot be enabled.</li></ul>
<p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_p270504914715">Make sure the cluster is deployed in a secure environment. Do not expose the cluster's network interface to the public network.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_row1382494518113"><td class="cellrowborder" rowspan="2" valign="top" width="10%" headers="mcps1.3.2.2.2.5.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_p136722051122012">Security-mode cluster</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.2.2.5.1.2 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_p1482494513117">Security-mode cluster + HTTP:</p>
<ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_ul1487604825720"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_li187664814571"><span class="parmname" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_parmname14706172613573"><b>Security Mode</b></span>: enabled</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_li187654895714"><span class="parmname" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_parmname17212164685716"><b>HTTPS Access</b></span>: disabled</li></ul>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.2.2.2.5.1.3 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_p1282404517113">Such a cluster requires user authentication. It supports access control and data encryption, and it uses HTTP to transmit data in plaintext.</p>
</td>
<td class="cellrowborder" valign="top" width="35%" headers="mcps1.3.2.2.2.5.1.4 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_p546915126488">Use to balance security and performance.</p>
<ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_ul149328416439"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_li993294134314">Advantage: User authentication improves cluster security. HTTP-based access ensures high performance of the cluster. User permissions can be configured to ensure proper isolation.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_li109325434320">Disadvantage: Public network access is not supported.</li></ul>
<p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_p1228104918483">Make sure the cluster is deployed in a secure environment. Do not expose the cluster's network interface to the public network.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_row182416454111"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.5.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_p3824445111118">Security-mode cluster + HTTPS:</p>
<ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_ul19715045814"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_li19718015816"><span class="parmname" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_parmname177112014589"><b>Security Mode</b></span>: enabled</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_li27130185818"><strong id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_b84737176915">HTTPS Access</strong>: enabled</li></ul>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.5.1.2 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_p1375182731616">Such a cluster requires user authentication. It supports access control and data encryption, and it uses HTTPS to encrypt communication and enhance data security.</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.2.5.1.3 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_p15344951195119">Use when security takes precedence over performance and public network access is required.</p>
<ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_ul1151712715437"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_li19517167144318">Advantage: User authentication improves cluster security. HTTPS enhances cluster security by encrypting all communication over the public network. User permissions can be configured to ensure proper isolation.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000002322259906_en-us_topic_0000002287417308_en-us_topic_0000001973113041_en-us_topic_0000001938218212_li551713774316">Disadvantage: When HTTPS is used, data encryption and decryption introduce computational overhead and impact the cluster's read and write performance.</li></ul>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="p" id="EN-US_TOPIC_0000001992205853__p642320204171"><a href="#EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_table11800123345617">Table 2</a> lists the various types of security mode changes supported for CSS clusters.
<div class="tablenoborder"><a name="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_table11800123345617"></a><a name="en-us_topic_0000001938218408_table11800123345617"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_table11800123345617" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Security mode change scenarios</caption><thead align="left"><tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row1280073312560"><th align="left" class="cellrowborder" valign="top" width="19.04809519048095%" id="mcps1.3.3.2.2.4.1.1"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1141920104317">Action</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40.475952404759525%" id="mcps1.3.3.2.2.4.1.2"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p17800333195611">Scenario</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40.475952404759525%" id="mcps1.3.3.2.2.4.1.3"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p7800133311569">Change Process</p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row4800123312564"><td class="cellrowborder" rowspan="2" valign="top" width="19.04809519048095%" headers="mcps1.3.3.2.2.4.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p6440627317">Switching from the non-security mode to security mode</p>
</td>
<td class="cellrowborder" valign="top" width="40.475952404759525%" headers="mcps1.3.3.2.2.4.1.2 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p12518114075810">Non-security mode → Security mode + HTTP: Change a cluster from non-security mode to security mode + HTTP.</p>
</td>
<td class="cellrowborder" rowspan="5" valign="top" width="40.475952404759525%" headers="mcps1.3.3.2.2.4.1.3 "><ol id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_ol1233711111513"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li63371111520">Select a node and modify the OpenSearch, OpenSearch Dashboards, and Cerebro configuration files.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li333810119517">Restart the OpenSearch, OpenSearch Dashboards, and Cerebro processes and restore data.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li933810114512">After the node recovers, proceed to another node and repeat the steps above. This goes on until all nodes are changed.</li></ol>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row16800183345614"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.2.4.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p3800163311569">Non-security mode → Security mode + HTTPS: Change a cluster from non-security mode to security mode + HTTPS.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row480014335560"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.2.4.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1332918520118">Switching from security mode to non-security mode</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.2.4.1.2 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p899814145916">Security mode → Non-security mode:</p>
<ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_ul729121495911"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li629171414595">Change a cluster from security mode + HTTP to non-security mode.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li1029116145599">Change a cluster from security mode + HTTPS to non-security mode.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row38006332562"><td class="cellrowborder" rowspan="2" valign="top" headers="mcps1.3.3.2.2.4.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p21212371338">Switching between HTTP and HTTPS in security mode</p>
</td>
<td class="cellrowborder" valign="top" headers="mcps1.3.3.2.2.4.1.2 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1780043312561">HTTP → HTTPS: Change a cluster from security mode + HTTP to security mode + HTTPS.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row13800133315562"><td class="cellrowborder" valign="top" headers="mcps1.3.3.2.2.4.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1610943105915">HTTPS → HTTP: Change a cluster from security mode + HTTPS to security mode + HTTP.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_section694164622618"><h4 class="sectiontitle">Change Impact</h4><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p6910133541820">Before changing the security mode for a cluster, it is essential to assess the potential impacts and review operational recommendations. This enables proper scheduling of the change, minimizing service interruptions.</p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_table729212132916" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Impact overview</caption><thead align="left"><tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row830181213294"><th align="left" class="cellrowborder" valign="top" width="16.666666666666664%" id="mcps1.3.4.3.2.7.1.1"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1930161211297">Action</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="16.666666666666664%" id="mcps1.3.4.3.2.7.1.2"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1330111216290">Service Interruption</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="16.666666666666664%" id="mcps1.3.4.3.2.7.1.3"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p17301129294">Authentication Mode</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="16.666666666666664%" id="mcps1.3.4.3.2.7.1.4"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p11301312122913">Performance</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="16.666666666666664%" id="mcps1.3.4.3.2.7.1.5"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p5301112142912">Public Network Access</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="16.666666666666664%" id="mcps1.3.4.3.2.7.1.6"><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p130151292917">Security Account</p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row03017121292"><td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p3301812202917">Non-security mode → Security mode + HTTP</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.2 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p230812192911">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.3 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1230712172915">Authentication required</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.4 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p9301112152919">N/A</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.5 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p133051272915">Disallowed</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.6 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p17301012122911">N/A</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row6301123299"><td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p530131252910">Non-security mode → Security mode + HTTPS</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.2 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p163017126295">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.3 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p930191218292">Authentication required</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.4 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p63001262913">Downgraded</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.5 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p14302128291">Allowed</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.6 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p20301312182919">N/A</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row173031219299"><td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p6316122295">Security mode → Non-security mode</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.2 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p143111252918">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.3 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1431161282919">Authentication not required</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.4 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p93111122294">Enhanced</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.5 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p11317127297">Automatically disabled</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.6 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p15311412112915">Permanently deleted</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row14311121297"><td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p11311912172920">HTTP → HTTPS</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.2 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p531171272916">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.3 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p12311012192914">No change</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.4 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1531111282920">Downgraded</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.5 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1631181215292">Allowed</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.6 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1931171210293">N/A</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_row838761313218"><td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.1 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p6388513183210">HTTPS → HTTP</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.2 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p2388181319327">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.3 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p9388131316322">No change</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.4 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1338821373220">Enhanced</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.5 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p13881513193217">Automatically disabled</p>
</td>
<td class="cellrowborder" valign="top" width="16.666666666666664%" headers="mcps1.3.4.3.2.7.1.6 "><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p193881213143210">N/A</p>
</td>
</tr>
</tbody>
</table>
</div>
<p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p12342144215382">Impact description:</p>
<ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_ul1087005823916"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li58704581396">The security mode can be enabled or disabled for a cluster, and a security-mode cluster can use either HTTPS and HTTP.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li1883115213410">Service interruption: When a cluster's security mode is changed, the cluster automatically restarts, leading to temporary service unavailability.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li12536122364018">Authentication mode: Changing a cluster's security mode also changes its user authentication mechanism. The client authentication logic must be updated accordingly. If client adaptation cannot be completed in a timely manner, services may be interrupted.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li178202213472">Performance impact: Given the same hardware configuration, switching from HTTP to HTTPS leads to a performance loss (such as throughput) of around 20% under high concurrency. Conversely, when a cluster switches from HTTPS to HTTP, cluster performance improves.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li3812154084114">Public network access: Only security-mode clusters that use HTTPS support public network access.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li17792155315513">Security account: When the security mode is disabled for a cluster, the system permanently deletes the cluster's security account.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li1644435411714">Tool impact: If the security mode is changed for a cluster that has an ongoing OpenSearch Dashboards session, an error message will be displayed on OpenSearch Dashboards. To rectify the error, clear the cache and launch OpenSearch Dashboards again.</li></ul>
<p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p2948139171114">Changing the security mode for a cluster changes its accessibility mode, possibly causing service interruptions. You should perform this operation before services are brought online or when service interruptions can be tolerated.</p>
</div>
<div class="section" id="EN-US_TOPIC_0000001992205853__section06106295184"><h4 class="sectiontitle">Change Duration</h4><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p16969124118515">The following formula can be used to estimate how long it will take to change the security mode for a cluster:</p>
<p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p2382153812219"><strong id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_b153826382214">Change duration (min) = 5 (min) x Total number of nodes to change + Data recovery duration (min)</strong></p>
<div class="p" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p13772163437">where,<ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_ul187731238317"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li1477319319320">5 minutes indicates how long non-data recovery operations (e.g., initialization) typically take per node. It is an empirical value.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li157731432318">The total number of nodes is the sum of the number of data nodes, master nodes, client nodes, and cold data nodes in the cluster.</li></ul>
</div>
<p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p1777595312315"><strong id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_b1077514531314">Data recovery duration (min) = Total data size (MB)/[Total number of vCPUs of the data nodes x 32 (MB/s) x 60 (s)]</strong></p>
<div class="p" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_p28141516068">where,<ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_ul115291993613"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li1452919766">32 MB/s indicates that each vCPU can process 32 MB of data per second. It is an empirical value.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_li14529891964">The formulas above use estimates under ideal conditions. The actual data recovery speed depends on cluster load.</li></ul>
</div>
</div>
<div class="section" id="EN-US_TOPIC_0000001992205853__section369814421182"><h4 class="sectiontitle">Prerequisites</h4><ul id="EN-US_TOPIC_0000001992205853__ul16991421182"><li id="EN-US_TOPIC_0000001992205853__li392016144316">All mission-critical data has been backed up. For details, see <a href="css_01_0298.html">Creating Snapshots to Back Up the Data of an OpenSearch Cluster</a>.</li><li id="EN-US_TOPIC_0000001992205853__li569984210814">The cluster status is <strong id="EN-US_TOPIC_0000001992205853__b12891214131115">Available</strong>, and there are no ongoing tasks.</li><li id="EN-US_TOPIC_0000001992205853__li196993421815">Check whether load balancing is enabled for the cluster. If yes, disable load balancing first. Enable load balancing again after the security mode is changed. This prevents errors in accessing the cluster through the load balancer during the change.</li></ul>
</div>
<div class="section" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_section17593143823914"><h4 class="sectiontitle">Switching from the Non-Security Mode to Security Mode</h4><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_p1177341319142">You can change a non-security mode cluster to a security-mode cluster that uses HTTP or HTTPS. After a cluster's security mode is enabled, user authentication is required for accessing the cluster.</p>
<ol id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_ol17819172318217"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li16819523122116"><span id="EN-US_TOPIC_0000001992205853__ph179116118620">Log in to the CSS management console.</span></li><li id="EN-US_TOPIC_0000001992205853__li4250043448">In the navigation pane on the left, choose <span class="uicontrol" id="EN-US_TOPIC_0000001992205853__uicontrol72501753113214"><b>Clusters &gt; OpenSearch</b></span>.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001285669680_li17735636141417">In the cluster list, find the target cluster, and choose <strong id="EN-US_TOPIC_0000001992205853__b19714135633210">More</strong> &gt; <strong id="EN-US_TOPIC_0000001992205853__b1571413565325">Modify Configuration</strong> in the <strong id="EN-US_TOPIC_0000001992205853__b9715456183217">Operation</strong> column. The <strong id="EN-US_TOPIC_0000001992205853__b187150563329">Modify Configuration</strong> page is displayed.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li38201323122119">Choose the <strong id="EN-US_TOPIC_0000001992205853__b6924299842346">Change Security Mode</strong> tab.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li17820423172118">Enable the security mode. Enter and confirm the administrator password of the cluster.<div class="fignone" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_fig19444818202516"><span class="figcap"><b>Figure 1 </b>Switching from the non-security mode to security mode</span><br><span><img id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_image849123981615" src="figure/en-us_image_0000002289446649.png"></span></div>
</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li28901330102310">Enable or disable <strong id="EN-US_TOPIC_0000001992205853__b5122144462346">HTTPS Access</strong>.<ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_ul279622852614"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li37961728102613">If you enable <strong id="EN-US_TOPIC_0000001992205853__b16222700812346">HTTPS Access</strong>, HTTPS is used to encrypt cluster communication, and public network access can be enabled for the cluster.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li157967286260">If you disable <strong id="EN-US_TOPIC_0000001992205853__b10001088302346">HTTPS Access</strong>, HTTP is used, and public network access is disallowed for the cluster.</li></ul>
</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li1049844911124">Click <strong id="EN-US_TOPIC_0000001992205853__b9612577272346">Submit</strong>, and confirm the information. The cluster list is displayed.<p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_p10384125013121">The <strong id="EN-US_TOPIC_0000001992205853__b8706854202346">Task Status</strong> of the cluster is <strong id="EN-US_TOPIC_0000001992205853__b7760204962346">Changing security mode</strong>. When the cluster status changes to <strong id="EN-US_TOPIC_0000001992205853__b9256243982346">Available</strong>, the security mode has been successfully changed.</p>
</li></ol>
</div>
<div class="section" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_section93951219134016"><h4 class="sectiontitle">Switching from Security Mode to Non-Security Mode</h4><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_p1244611277217">You can change a security-mode cluster that uses HTTP or HTTPS to a non-security cluster. After a cluster's security mode is disabled, user authentication is no longer required for accessing the cluster.</p>
<div class="warning" id="EN-US_TOPIC_0000001992205853__note152561021133315"><span class="warningtitle"><img src="public_sys-resources/warning_3.0-en-us.png"> </span><div class="warningbody"><ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_ul1093191512125"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li15854114381519">Clusters with the security mode disabled do not require user authentication, and HTTP is used to transmit data in plaintext. Make sure such a cluster are deployed in a secure environment, and do not expose the cluster's network interface to the public network.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li65711117191219">When a cluster is switched from the security mode to non-security mode, indexes used by the security-mode cluster will be deleted. Back up data before changing the security mode.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li1555864144318">If a public IP address has been assigned to a security-mode cluster, unassign it before changing the security mode.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li139235391391">If OpenSearch Dashboards public network access is enabled for a security-mode cluster, disable it before changing the security mode.</li></ul>
</div></div>
<ol id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_ol676642155415"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li2766221105411"><span id="EN-US_TOPIC_0000001992205853__ph1635562710915">Log in to the CSS management console.</span></li><li id="EN-US_TOPIC_0000001992205853__li9613213131019">In the navigation pane on the left, choose <span class="uicontrol" id="EN-US_TOPIC_0000001992205853__uicontrol1453003643319"><b>Clusters &gt; OpenSearch</b></span>.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li0766142135415">In the cluster list, find the target cluster, and choose <strong id="EN-US_TOPIC_0000001992205853__b191361839123313">More</strong> &gt; <strong id="EN-US_TOPIC_0000001992205853__b19136183920339">Modify Configuration</strong> in the <strong id="EN-US_TOPIC_0000001992205853__b91362399331">Operation</strong> column. The <strong id="EN-US_TOPIC_0000001992205853__b151361639173315">Modify Configuration</strong> page is displayed.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li27661021165417">Choose the <strong id="EN-US_TOPIC_0000001992205853__b8689570222346">Change Security Mode</strong> tab.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li2766121175411">Disable the security mode.<div class="fignone" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_fig207661521145417"><span class="figcap"><b>Figure 2 </b>Switching from security mode to non-security mode</span><br><span><img id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_image5561510141718" src="figure/en-us_image_0000002254796400.png"></span></div>
</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li108851643182214">Click <strong id="EN-US_TOPIC_0000001992205853__b20604873982346">Submit</strong>. In the displayed dialog box, confirm the information. The cluster list page is displayed.<p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_p118851443172217">The <strong id="EN-US_TOPIC_0000001992205853__b10716286112346">Task Status</strong> of the cluster is <strong id="EN-US_TOPIC_0000001992205853__b12127302892346">Changing security mode</strong>. When the cluster status changes to <strong id="EN-US_TOPIC_0000001992205853__b6679742412346">Available</strong>, the security mode has been successfully changed.</p>
</li></ol>
</div>
<div class="section" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_section672993904118"><a name="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_section672993904118"></a><a name="en-us_topic_0000001938218408_en-us_topic_0000001410060261_section672993904118"></a><h4 class="sectiontitle">Switching between HTTP and HTTPS in Security Mode</h4><p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_p11519334184514">You can change the protocol of a security cluster.</p>
<div class="warning" id="EN-US_TOPIC_0000001992205853__note1695742613332"><span class="warningtitle"><img src="public_sys-resources/warning_3.0-en-us.png"> </span><div class="warningbody"><ul id="EN-US_TOPIC_0000001992205853__ul19596145820417"><li id="EN-US_TOPIC_0000001992205853__li1259613589414">If a public IP address has been assigned to a security-mode cluster, unassign it before changing from HTTPS to HTTP.</li><li id="EN-US_TOPIC_0000001992205853__li1759715817415">If the OpenSearch cluster version is 2.x or later, HTTPS is enabled by default and cannot be disabled when the security mode is enabled. This means you cannot change from "Security Mode + HTTPS" to "Security Mode + HTTP".</li></ul>
</div></div>
<ol id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_ol386122354519"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li168611623144513"><span id="EN-US_TOPIC_0000001992205853__ph6371647892">Log in to the CSS management console.</span></li><li id="EN-US_TOPIC_0000001992205853__li9582174231015">In the navigation pane on the left, choose <span class="uicontrol" id="EN-US_TOPIC_0000001992205853__uicontrol12081645123311"><b>Clusters &gt; OpenSearch</b></span>.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li786119236450">In the cluster list, find the target cluster, and choose <strong id="EN-US_TOPIC_0000001992205853__b161728478338">More</strong> &gt; <strong id="EN-US_TOPIC_0000001992205853__b417234716336">Modify Configuration</strong> in the <strong id="EN-US_TOPIC_0000001992205853__b18173194712338">Operation</strong> column. The <strong id="EN-US_TOPIC_0000001992205853__b61738471330">Modify Configuration</strong> page is displayed.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li7861122374512">Choose the <strong id="EN-US_TOPIC_0000001992205853__b11953494432346">Change Security Mode</strong> tab.</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li14861172354515">Enable or disable <strong id="EN-US_TOPIC_0000001992205853__b11200319872346">HTTPS Access</strong>.<div class="fignone" id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001410060261_fig1816320165512"><span class="figcap"><b>Figure 3 </b>Configuring the protocol</span><br><span><img id="EN-US_TOPIC_0000001992205853__image12647191420187" src="figure/en-us_image_0000002304308981.png"></span></div>
<ul id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_ul10601539145613"><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li1360143919568">If you enable <strong id="EN-US_TOPIC_0000001992205853__b15850000492346">HTTPS Access</strong>,<p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_p184401359201216">HTTPS is used to encrypt cluster communication, and you can enable public network access for the cluster.</p>
</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li1981112610592">If you disable <strong id="EN-US_TOPIC_0000001992205853__b9444608002346">HTTPS Access</strong>, an alarm message is displayed. Click <strong id="EN-US_TOPIC_0000001992205853__b13998006322346">OK</strong> to disable the protocol.<p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_p143701279595">Cluster communication is no longer encrypted and public network access cannot be enabled.</p>
</li></ul>
</li><li id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_li193794820231">Click <strong id="EN-US_TOPIC_0000001992205853__b19923548692346">Submit</strong>, and confirm the information. The cluster list is displayed.<p id="EN-US_TOPIC_0000001992205853__en-us_topic_0000001938218408_en-us_topic_0000001410060261_p13791811235">The <strong id="EN-US_TOPIC_0000001992205853__b4704743872346">Task Status</strong> of the cluster is <strong id="EN-US_TOPIC_0000001992205853__b1070930572346">Changing security mode</strong>. When the cluster status changes to <strong id="EN-US_TOPIC_0000001992205853__b16303240922346">Available</strong>, the security mode has been successfully changed.</p>
</li></ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="css_01_0274.html">Managing OpenSearch Clusters</a></div>
</div>
</div>
View Git Blame Copy Permalink