Disabling non-SSL communications (optional)

To block all non-SSL connections, perform a few additional setup options.

  1. In the MySQL/MariaDB server configuration file /etc/my.cnf.d/server.cnf, add the following:
    bind-address = *
    require_secure_transport = ON
    Note: The bind-address is version dependent. Ensure you have a version of MySQL/MariaDB that supports it.
  2. Restart MySQL/Maria DB:
    systemctl restart mariadb
    Note: This may be either mysql or myself, depending on your MySQL version.

After making these changes, make sure that all services continue to operate as expected. If not, undo these changes and call IBM support for more guidance.