Initializing help system before first use

Create the SSL Certificate KeyStore

Note These instructions use the term <INSTALLDATADIR> to describe the path to your installation directory. This path will normally be C:\ProgramData\FICO\Xpress Insight\Server\ unless otherwise set by your IT department.
  1. Ensure that your files for the SSL certificate certificate.pem and private key privatekey.pem are saved in <INSTALLDATADIR>\config.
  2. Convert the PEM files into a temporary PKCS12 key store file. You will be prompted to supply a password for this new key store.
    openssl pkcs12 -export -name insight-server-https -in certificate.pem -inkey privatekey.pem -out temp-keystore.p12
  3. Convert the PKCS12 key store file into a Java KeyStore file. You will be prompted to enter the password entered in the previous step, and to provide a password for the destination Java KeyStore.
    keytool -importkeystore -destkeystore insight-keystore -srckeystore temp-keystore.p12 -srcstoretype pkcs12 -alias insight-server-https
  4. Remove the temporary PKCS12 key store file temp-keystore.p12.
    Note For testing purposes a self-signed certificate can be created with the following command, you will be prompted to provide a password for the KeyStore. Replace the hostname with the hostname of your Insight installation.
    keytool -genkey -v -keystore insight-keystore -keyalg RSA -keysize 2048 -validity 10000 -alias insight-server-https -dname "cn=<hostname>, ou=Unknown, o=Unknown, c=Unknown"

© 2001-2020 Fair Isaac Corporation. All rights reserved. This documentation is the property of Fair Isaac Corporation (“FICO”). Receipt or possession of this documentation does not convey rights to disclose, reproduce, make derivative works, use, or allow others to use it except solely for internal evaluation purposes to determine whether to purchase a license to the software described in this documentation, or as otherwise set forth in a written software license agreement between you and FICO (or a FICO affiliate). Use of this documentation and the software described in it must conform strictly to the foregoing permitted uses, and no other use is permitted.