Initializing help system before first use

Providing the REST API Credentials

For security reasons, the Xpress software does not accept the credentials to the Insight Server via command line or environmental variable. Instead, for each supported operating system (Windows, Mac, and Linux) the Xpress software integrates with the default secure storage mechanism for that OS.

Windows

When the environment is configured for remote solving, as described in the previous section, Xpress will retrieve the REST API credentials to Insight from the secure storage. The REST API credentials obtained from Insight for your account (see Generating REST API Credentials) need to be entered into the secure storage.

On Windows, Xpress integrates with Credential Manager.
  1. To open Credential Manager, type credential manager in the search box on the taskbar and select Credential Manager Control panel.
  2. Select Windows Credentials to access the manager.
  3. In the Generic Credentials list, click Add a generic credential.
  4. Populate the fields as follows:
    • Internet or network address: ficoxpress:<insight URL>
    • User name: <Client Id value from Insight>
    • Password: <Client secret value from Insight>
  5. Click OK, then close the Credential Manager.

Mac OS

On Mac OS, Xpress integrates with Keychain Access.
  1. In Applications > Utilities, open the Keychain Access app on your Mac.
  2. Select the login keychain in the Keychains list.
  3. Select File > New Password Item.
  4. Populate the fields as follows:
    • Keychain Item Name : ficoxpress:<insight URL>
    • Account Name : <Client Id value from Insight>
    • Password : <Client secret value from Insight>
  5. Click Add, then close the Keychain Access application.

Linux

On Linux, openssl tools are used to encrypt a file containing the Client id and Client secret.
  1. Set environment variable XPRESS_COMPUTE_AUTH_KEYFILE to the keyfile location. From the Linux bash shell, enter the following command and press Enter: 
    SET XPRESS_COMPUTE_AUTH_KEYFILE = <keyfile_location>
    Note For security, the <keyfile_location> should be on a different drive to the home directory.
  2. Populate the key file with secure random data. Enter the following command and press Enter: 
    openssl rand -base64 -out $XPRESS_COMPUTE_AUTH_KEYFILE 48
  3. To encrypt the Client ID and Client secret values into a file named .ficoxpress in your home directory, enter the following command, replacing CLIENTID and SECRET with the actual Client ID and Client secret values from the Insight Server: 
    (echo "CLIENTID" ; echo "SECRET" ) | openssl enc -aes-256-cbc -salt -md sha256 -out ~/.ficoxpress -pass file:$XPRESS_COMPUTE_AUTH_KEYFILE
Parent Topic Using the Compute Interface with Xpress