Configuring Foglight for using Encrypted repository connections with SQLServer (4328330)

For Foglight version 5.9.x:

To get an encrypted connection to the SQL Server instance please follow the steps below:

1. Go to "$FMS_HOME/config/datasource
2. Make a backup copy of file "datasource-sqlsvr.properties"
3. Open the file and add the following line at the end of the file:
   
   #Driver extra connection properties, format: 
   #    db.=
   db.encrypt=true

For Foglight version <5.9.x:

Please follow the steps below

1. Install the Foglight Management Server normally, with the installer, but choose “Manually create the repository database” (aka run later)
2. Run database creation/provisioning steps as per documentation against sqlserver repository instance via sqlserver tools (taking special care to run steps under appropriate documented authentication)
3. Reconfigure connection specifics in configuration file located in: %FMSHOME%/server/jboss/conf/sqlsrv-ds.xml (or %FMSHOME%/server/default/conf/sqlsrv-ds.xml pre 5.7.1)
   
   Replace:
   ${foglight.database.url}
   
   With:
   jdbc:sqlserver://DATABASEHOST:1433;integratedSecurity=true;encrypt=true;trustServerCertificate=true[;trustStore=STOREPATH;trustStorePassword=STOREPASS]
   
   Where:
   • integratedSecurity=true is for enabling integrated (aka windows) authentication
   • encrypt=true is for encrypted connections
   • trustServerCertificate=true is in case the database’s certificate is untrusted (self-signed, depends on whether customer knows how to provision a sqlserver certificate)
   • trustStore=STOREPATH;trustStorePassword=STOREPASS (optional with trustServerCertificate=false) for a custom certificate storage file (unless the cert/JRE trust is established – see below)
     
     Certificates can be imported into the JRE’s certificate storage file FMSHOME/jre/lib/security/cacerts  
     see:  Connecting with SSL Encryption
4. Run Foglight server using the appropriate windows user account