# Migration from Elastic Search 7.10 with xpack.security to Opensearch 2x

**URL:** <https://forum.opensearch.org/t/migration-from-elastic-search-7-10-with-xpack-security-to-opensearch-2x/15300>\
**Category:** OpenSearch\
**Created:** [July 27, 2023, 9:42am UTC](https://forum.opensearch.org/t/migration-from-elastic-search-7-10-with-xpack-security-to-opensearch-2x/15300 "2023-07-27T09:42:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![robertn](https://avatars.discourse-cdn.com/v4/letter/r/f0a364/32.png) [@robertn](https://forum.opensearch.org/u/robertn)\
**Post date:** [July 27, 2023, 9:42am UTC](https://forum.opensearch.org/t/migration-from-elastic-search-7-10-with-xpack-security-to-opensearch-2x/15300/1 "2023-07-27T09:42:22Z")

</div>

We have xpack.security setup on ElasticSearch and need to move to Opensearch

Is there any easy way to migrate with minimal downtime or would it be a case of disabling xpack.security, and doing a rolling cluster upgrade with Opensearch without security and then starting from scratch with security in Opensearch?

We are also thinking of reducing the number of nodes in Elasticsearch to allow a new cluster to be created and then importing the data into this

---

<div class="post-metadata">

**Author:** ![Eugene7](https://avatars.discourse-cdn.com/v4/letter/e/bbce88/32.png) [@Eugene7](https://forum.opensearch.org/u/Eugene7)\
**Post date:** [July 27, 2023, 11:17am UTC](https://forum.opensearch.org/t/migration-from-elastic-search-7-10-with-xpack-security-to-opensearch-2x/15300/2 "2023-07-27T11:17:09Z")

</div>

Hi @robertn !

One of the possible migration methods is the reindex API for your case.

Have you read the following topic?

> [@How to handle ssl certs for remote cluster for reindex api?](https://forum.opensearch.org/t/how-to-handle-ssl-certs-for-remote-cluster-for-reindex-api/10313):
>
> I am trying to use the reindex api to copy an index from a remote cluster into the local cluster. What is the process for adding the cert for the remote cluster in order to connect? I have tried added the remote CA and intermediary to the plugins.security.ssl.transport.pemtrustedcas\_filepath and plugins.security.ssl.http.pemtrustedcas\_filepath but no luck. Any suggestion on getting connection to a remote cluster working? Error when trying to run reindex { "error" : { "root\_cause" : [ …