Initializing help system before first use

Configuring a Secure MySQL Connection

The connection between Xpress Insight and MySQL should be secured by enabling an SSL connection.
To configure SSL on the connection, perform the following steps:
  1. Configure your MySQL server to support SSL.
    You can find further information on this in the MySQL documentation.
  2. Edit the application.properties file.
    1. Modify the insight.server.persistence.mysql.username and insight.server.persistence.mysql.password properties to match the user account created in MySQL.
    2. Modify the insight.server.persistence.mysql.url property either to encrypt the connection using SSL, or to authenticate using a certificate:
      • To encrypt the connection using SSL, add useSSL=true as a parameter in connection string.
      • To use a certificate located in the local file system, add the location of the file to the connection string: 
        serverSslCert=path/to/server-cert.pem
        For example: 
        jdbc:mariadb://mydatabaseserver.mycorp.com:3306/insight5?useSSL=true&serverSslCert=path/to/server-cert.pem
      • To use a certificate located in a trust store, add the following parameters to the connection string: 
        storetrustStore=path/to/truststore&trustStorePassword=passwordOfStore
        For example: 
        jdbc:mariadb://mydatabaseserver.mycorp.com:3306/insight5?useSSL=true&storetrustStore=path/to/truststore&trustStorePassword=passwordOfStore
      • To point to the location of the SSL certificate (either on the file system or located in a trust store).
      Note: The server name declared in the connection URL must match the server name defined in the SSL certificate. If they do not match, Xpress Insight will not start.
After you have configured SSL support for MySQL, it is recommended that you modify the user ID for MySQL to require SSL. For more information, see Using MySQL for the Repository.
Parent Topic Enabling HTTPS on the Insight Server

© 2001-2026 Fair Isaac Corporation. All rights reserved. This documentation is the property of Fair Isaac Corporation (“FICO”). Receipt or possession of this documentation does not convey rights to disclose, reproduce, make derivative works, use, or allow others to use it except solely for internal evaluation purposes to determine whether to purchase a license to the software described in this documentation, or as otherwise set forth in a written software license agreement between you and FICO (or a FICO affiliate). Use of this documentation and the software described in it must conform strictly to the foregoing permitted uses, and no other use is permitted.