Standalone tool


is it possible to run the securityadmin tool standalone - without intallation of the hole opendistroforelasticsearch installation.

For a central administration of multiple instances it would be useful to have only this tool installed on a “management host” where also the admin certificate is located.




I’ve found that in the maven artifacts for the opendistro_security plugin, there is a zip file that contains a standalone securityadmin tool –

This isn’t advertised in the docs, but I’ve downloaded it and it looks like it just works, however it looks to be omitted from the docs.
Could one of the repository owners chip in & say if using this standalone tool is supported?

Hi bl5!

I downloaded the jar and tried to start it with
java -jar opendistro_security-

But I get an error that the main manifest attribute is missing. Could you please post how you get it to work.



Download not the jar file.

Unzipping the file e.g.


Extracting the zip gets you a two subfolders: tools and deps

In tools, there is a script that can be ran in similar style to the scripts found in the Opendistro documnetation.

Great! This works perfect. It would be much greater if

  • it would be documented
  • it would be supported

Thanx for help!