MySQLAgent activation fails with error "Public Key Retrieval is not allowed" (4300006)

MySQL agent activation failing with error message in the logs:

ERROR   [FglAM:IncomingMessage[5]-317] com.quest.glue.core.agent.AgentInstance - Failed to start data collection

java.sql.SQLNonTransientConnectionException: Public Key Retrieval is not allowed

The error occurs during the initial JDBC handshake, often while the agent attempts to retrieve the MySQL server version.
The agent doesn't enter a running state.

This issue occurs when the MySQL server requires secure connections (SSL/TLS) and the MySQL Agent is not configured to force SSL.

In MySQL 8+, the default authentication plugin (caching_sha2_password) requires either:

• SSL, or
• a successful RSA public key exchange

If the server enforces secure transport (for example, require_secure_transport = ON), RSA public key retrieval is ignored and the connection fails unless SSL is explicitly required.

Note:
Enabling Allow Remote Public Key Retrieval alone may not resolve the issue.
Using the root user does not bypass this restriction.

Force SSL (Preferred)

1. Navigate to Agent Status dashboard (Administration | Agents | Agent Status)
2. Select the MySQLAgent agent 
3. Click Edit Properties
4. Click Modify the private properties for this agent
5. Set the following values
   • SSL Mode = Required
   • Allow Remote Public Key Retrieval = Disabled
   • Local Public Key File Path = default value or . (with no quotation marks)
6. Click Save
7. Reactivate the agent

After applying these changes, try activating the agent again to confirm issue is resolved.

Alternative (Only if SSL cannot be used)