Disabling non-SSL communications (optional)

To block all non-SSL connections, perform a few additional setup options.

  1. In the MySQL or MariaDB server configuration file /etc/my.cnf.d/server.cnf, add the following:
    bind-address = *
    require_secure_transport = ON
    Note: The bind-address is version dependent. Ensure you have a version of MySQL or MariaDB that supports it.
  2. Restart MySQL or MariaDB:
    systemctl restart mariadb
    Note: If using MySQL, your service name may be mysql or mysqld.

After making these changes, make sure that all services continue to operate as expected. If not, undo these changes and call IBM support for more guidance.