Initializing help system before first use

Providing the REST API Credentials

For security reasons, the Xpress software does not accept the credentials to the Insight Server via command line or environmental variable. Instead, for each supported operating system (Windows, Mac, and Linux) the Xpress software integrates with the default secure storage mechanism for that OS. When the environment is configured for remote solving as described in the previous section, Xpress will retrieve the REST API credentials to Insight from the secure storage.

Windows

The REST API credentials obtained from Insight for your account, as described in the preceding chapter, need to be entered into the secure storage.

On Windows, Xpress integrates with Credential Manager.
  1. To open Credential Manager, type credential manager in the search box on the taskbar and select Credential Manager Control panel.
  2. Select Windows Credentials to access the manager.
  3. In the Generic Credentials list, click Add a generic credential.
  4. Populate the fields as follows:
    • Internet or network address: ficoxpress:<insight URL>
    • User name: <Client Id value from Insight>
    • Password: <Client secret value from Insight>
  5. Click OK, then close the Credential Manager.

Mac OS

On Mac OS, Xpress integrates with Keychain Access.
  1. In Applications > Utilities, open the Keychain Access app on your Mac.
  2. Select the login keychain in the Keychains list.
  3. Select File > New Password Item.
  4. Populate the fields as follows:
    • Keychain Item Name : ficoxpress:<insight URL>
    • Account Name : <Client Id value from Insight>
    • Password : <Client secret value from Insight>
  5. Click Add, then close the Keychain Access application.

Linux

On Linux, openssl tools are used to encrypt a file containing the Client id and Client secret.
  1. Set environment variable XPRESS_COMPUTE_AUTH_KEYFILE to the keyfile location. From the Linux bash shell, enter the following command and press Enter: 
    SET XPRESS_COMPUTE_AUTH_KEYFILE = <keyfile_location>
    Note For security, the <keyfile_location> should be on a different drive to the home directory.
  2. Populate the key file with secure random data. Enter the following command and press Enter: 
    openssl rand -base64 -out $XPRESS_COMPUTE_AUTH_KEYFILE 48
  3. To encrypt the Client ID and Client secret values into a file named .ficoxpress in your home directory, enter the following command, replacing CLIENTID and SECRET with the actual Client ID and Client secret values from the Insight Server: 
    (echo "CLIENTID" ; echo "SECRET" ) | openssl enc -aes-256-cbc -salt -md sha256 -out ~/.ficoxpress -pass file:$XPRESS_COMPUTE_AUTH_KEYFILE
Parent Topic Using the Compute Interface with Xpress

© 2001-2020 Fair Isaac Corporation. All rights reserved. This documentation is the property of Fair Isaac Corporation (“FICO”). Receipt or possession of this documentation does not convey rights to disclose, reproduce, make derivative works, use, or allow others to use it except solely for internal evaluation purposes to determine whether to purchase a license to the software described in this documentation, or as otherwise set forth in a written software license agreement between you and FICO (or a FICO affiliate). Use of this documentation and the software described in it must conform strictly to the foregoing permitted uses, and no other use is permitted.