The Foglight FMS installer does not support connecting to PostgreSQL with SSL. 

How can a FMS repository be installed using PostgreSQL with a forced SSL connection?

Is this configuration supported?

When installing Foglight using an external PostgreSQL repository database with forced SSL connections, the installation fails and it is not possible to connect. The installer does not prompt for SSL details.

Error - Failed to Connect as foglight repository administrator:

org.postgresql.util.PSQLException: FATAL: no pg_hba.conf entry for host

"host", user "user", database "foglight", SSL off

There are multiple methods to configure a Foglight FMS installation to use a PostgreSQL database repository with force SSL enabled.

WORKAROUND 1 - Preferred

Use the silent installer. The silent installer properties file supports an “FMS_DB_CONNECTION_URL” property allow the JDBC URL to be provided.

Run the silent installer against a PostgreSQL database with forced SSL and self-signed certificates using the following property value (where localhost is the FMS repository server hostname)

FMS_DB_CONNECTION_URL=jdbc:postgresql://localhost:5432/fogssl?ssl=true&sslfactory=org.postgresql.ssl.NonValidatingFactory

WORKAROUND 2

1. Run the Foglight installer, getting to the repository creation screen. 
2. Choose the “create database manually” option to generate the sql scripts needed to manually create the database.
3. Run the scripts via pgAdmin, or any utility that can execute sql scripts against your postgres repository.
4. Cancel out of the installer

5. At this point the files are installed on your server, but are not configured fully.

6. Modify the foglighthome\config\server.config file to add connectivity details to the postgresql repository instance.

7. 1. You should be able to use the 'server.database.url = "jdbc:postgresql://host:port/foglight?ssl=true";' instead of server.database.host in the file to enforce ssl.
   2. Make any other necessary changes to server.config including configured ports, jvm memory settings, etc…

8. Start Foglight

Note: Using the command line installer option (-i console) allows for the installation to be completed without having to cancel it; then it is possible to manually apply the required configuration changes for SSL connection (steps 6-8).

WORKAROUND 3

Refer to KB 281210 - How to set up Foglight to connect to a PostgreSQL backend repository via SSL with client certificate Authentication

STATUS

Enhancement ID FOG-3006 has been logged to include an option for SSL support to PostgreSQL repository in a future release of the Foglight FMS installer.