Foglight 6.3.0 installer fails with a certificate error when SQL Server backend has forced encryption (4372127)

Add trustServerCertificate=true to the connection URL to not validate the server TLS/SSL certificate or import the certificate to the Foglight TrustStore.

For a Foglight upgrade

1. Remove comment and update the server.database.url parameter in [FMS_HOME]/config/server.config with a custom connection URL including the trustServerCertificate=true property; for example:
   • If using Windows authentication:

     server.database.url = "jdbc:sqlserver://;serverName=servername;portNumber=1433;database=Foglight;encrypt=false;integratedSecurity=true;trustServerCertificate=true";

   • If using SQL Server authentication:

     server.database.url = "jdbc:sqlserver://;serverName=servername;portNumber=1433;database=Foglight;encrypt=false;trustServerCertificate=true";

2. Run the installer and complete the upgrade process.
3. Optional: Comment out the connection string parameter from step (1) and import the database or Certificate Authority certificates to the Foglight TrustStore.
4. Start Foglight.

For a new Foglight installation

1. Temporarily disable the Forced Encryption parameter in the SQL Server instance.
2. Run the installer and complete the installation process.
3. Enable 'Forced Encryption' parameter in the SQL Server instance.
4. Configure the server.database.url parameter as per step (1) in the upgrade process OR import the database or Certificate Authority certificates to the Foglight TrustStore.
5. Start Foglight.

1. Run the Foglight installer and continue until the Foglight Repository (SQL Server) screen.
2. Choose the option to Manually create the repository database.
3. Foglight Repository Initialization scripts will be placed into [FMS_HOME]\scripts\sql.
4. Run the initialization scripts via SQL Server Management Studio.
5. Cancel out of the installer; at this point the files are installed in the server, but the configuration is not complete.
6. Update [FMS_HOME]\config\server.config to with the database connection parameters:
   • server.database.host
   • server.database.port
   • server.database.name
   • server.database.user (if not using integrated authentication)
   • server.database.password (if not using integrated authentication; for password encryption refer to How to reset the Foglight remote database user password if it has been forgotten? (4232181))
   • server.database.type (set to "sqlsvr")
   • server.database.integratedauth (set to "true" if using integrated authentication)
   • server.database.url (if not importing certificates, configure parameter as per step (1) in the upgrade process)
7. Optional: If not configuring server.database.url in the previous step, import the database or Certificate Authority certificates to the Foglight TrustStore.
8. Start Foglight.