2021-05-05 13:09:47 -04:00
---
layout: default
title: Configuration
nav_order: 1
parent: Security
has_children: true
has_toc: false
---
# Security configuration
The plugin includes demo certificates so that you can get up and running quickly, but before using OpenSearch in a production environment, you must configure it manually:
2021-05-06 22:20:19 -04:00
1. [Replace the demo certificates ](../../opensearch/install/docker-security/ )
2021-05-05 13:09:47 -04:00
1. [Reconfigure opensearch.yml to use your certificates ](tls/ )
1. [Reconfigure config.yml to use your authentication backend ](configuration/ ) (if you don't plan to use the internal user database)
1. [Modify the configuration YAML files ](yaml/ )
1. [Apply changes using securityadmin.sh ](security-admin/ )
1. Start OpenSearch.
1. [Add users, roles, role mappings, and tenants ](../access-control/ )
If you don't want to use the plugin, see [Disable security ](disable/ ).
