Establishing Trust Between the Server and Worker
- Use the docker ps command to find the container IDs of the Insight sever and worker.
- Use the following command to open a Bash shell inside the server container:
docker exec -it server_container_id bash - Run the following commands:
cd server java -Djavax.net.ssl.trustStore=insight-cacerts -jar webapp.jar --trust-ssl worker:8443Note: If you encounter aPermission Deniederror, reopen the Bash prompt using therootuser:docker exec -u -root -it container_id bash - Exit Bash.
- Use the following command to open a Bash shell inside the worker container:
docker exec -it worker_container_id bash - Run the following commands:
java -Djavax.net.ssl.trustStore=insight-cacerts -jar webapp.jar --trust-ssl server:8443 - Exit Bash.
- Open secrets/ssl_keystore_password.txt and verify that the password is set to
changeit.This password is used for public certificate keystores and cannot be changed. By default, it is also used as the password for the private certificates. For improved security, you should change the passwords for these keystores and add the new password to override.properties:server.ssl.key-store-password=encrypted_keystore_passwordTip: For more information about how to encrypt the password, see Encrypting Sensitive Application Properties.
Using provided SSL keystore in the server and worker logs.
© 2001-2025 Fair Isaac Corporation. All rights reserved. This documentation is the property of Fair Isaac Corporation (“FICO”). Receipt or possession of this documentation does not convey rights to disclose, reproduce, make derivative works, use, or allow others to use it except solely for internal evaluation purposes to determine whether to purchase a license to the software described in this documentation, or as otherwise set forth in a written software license agreement between you and FICO (or a FICO affiliate). Use of this documentation and the software described in it must conform strictly to the foregoing permitted uses, and no other use is permitted.
