<div id="docs-body">
 <div class="section">
  <div class="titlepage">
   <div>
    <div>
     <h3 class="title">
      <a name="mysql-secure-installation">
      </a>
      6.4.2 mysql_secure_installation — Improve MySQL Installation Security
     </h3>
    </div>
   </div>
  </div>
  <a class="indexterm" name="idm46045320634576">
  </a>
  <p>
   This program enables you to improve the security of your MySQL
        installation in the following ways:
  </p>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      You can set a password for
      <code class="literal">
       root
      </code>
      accounts.
     </p>
    </li>
    <li class="listitem">
     <p>
      You can remove
      <code class="literal">
       root
      </code>
      accounts that are
            accessible from outside the local host.
     </p>
    </li>
    <li class="listitem">
     <p>
      You can remove anonymous-user accounts.
     </p>
    </li>
    <li class="listitem">
     <p>
      You can remove the
      <code class="literal">
       test
      </code>
      database (which
            by default can be accessed by all users, even anonymous
            users), and privileges that permit anyone to access
            databases with names that start with
      <code class="literal">
       test_
      </code>
      .
     </p>
    </li>
   </ul>
  </div>
  <p>
   <a class="link" href="mysql-secure-installation.html" title="6.4.2 mysql_secure_installation — Improve MySQL Installation Security">
    <span class="command">
     <strong>
      mysql_secure_installation
     </strong>
    </span>
   </a>
   helps you implement
        security recommendations similar to those described at
   <a class="xref" href="default-privileges.html" title="2.9.4 Securing the Initial MySQL Account">
    Section 2.9.4, “Securing the Initial MySQL Account”
   </a>
   .
  </p>
  <p>
   Normal usage is to connect to the local MySQL server; invoke
   <a class="link" href="mysql-secure-installation.html" title="6.4.2 mysql_secure_installation — Improve MySQL Installation Security">
    <span class="command">
     <strong>
      mysql_secure_installation
     </strong>
    </span>
   </a>
   without arguments:
  </p>
  <div class="copytoclipboard-wrapper">
   <pre class="programlisting one-line language-terminal"><div class="docs-select-all right" id="sa17476292"><div class="copy-help left">Press ⌘+C to copy</div> <div class="right"><button class="clipboard-btn" title="Copy to Clipboard"><span class="icon-clipboard"></span></button></div></div><code class="language-terminal">mysql_secure_installation</code></pre>
  </div>
  <p>
   When executed,
   <a class="link" href="mysql-secure-installation.html" title="6.4.2 mysql_secure_installation — Improve MySQL Installation Security">
    <span class="command">
     <strong>
      mysql_secure_installation
     </strong>
    </span>
   </a>
   prompts you to determine which actions to perform.
  </p>
  <p>
   The
   <code class="literal">
    validate_password
   </code>
   component can be used
        for password strength checking. If the plugin is not installed,
   <a class="link" href="mysql-secure-installation.html" title="6.4.2 mysql_secure_installation — Improve MySQL Installation Security">
    <span class="command">
     <strong>
      mysql_secure_installation
     </strong>
    </span>
   </a>
   prompts the user
        whether to install it. Any passwords entered later are checked
        using the plugin if it is enabled.
  </p>
  <p>
   Most of the usual MySQL client options such as
   <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_host">
    <code class="option">
     --host
    </code>
   </a>
   and
   <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_port">
    <code class="option">
     --port
    </code>
   </a>
   can be
        used on the command line and in option files. For example, to
        connect to the local server over IPv6 using port 3307, use this
        command:
  </p>
  <div class="copytoclipboard-wrapper">
   <pre class="programlisting one-line language-terminal"><div class="docs-select-all right" id="sa34964253"><div class="copy-help left">Press ⌘+C to copy</div> <div class="right"><button class="clipboard-btn" title="Copy to Clipboard"><span class="icon-clipboard"></span></button></div></div><code class="language-terminal">mysql_secure_installation <span class="token constant">--host</span><span class="token attr-value"><span class="token punctuation">=</span>::1</span> <span class="token constant">--port</span><span class="token attr-value"><span class="token punctuation">=</span>3307</span></code></pre>
  </div>
  <p>
   <a class="link" href="mysql-secure-installation.html" title="6.4.2 mysql_secure_installation — Improve MySQL Installation Security">
    <span class="command">
     <strong>
      mysql_secure_installation
     </strong>
    </span>
   </a>
   supports the
        following options, which can be specified on the command line or
        in the
   <code class="literal">
    [mysql_secure_installation]
   </code>
   and
   <code class="literal">
    [client]
   </code>
   groups of an option file. For
        information about option files used by MySQL programs, see
   <a class="xref" href="option-files.html" title="6.2.2.2 Using Option Files">
    Section 6.2.2.2, “Using Option Files”
   </a>
   .
  </p>
  <div class="table">
   <a name="idm46045320608816">
   </a>
   <p class="title">
    <b>
     Table 6.9 mysql_secure_installation Options
    </b>
   </p>
   <div class="table-contents">
    <table frame="box" rules="all" summary="Command-line options available for mysql_secure_installation.">
     <colgroup>
      <col style="width: 35%"/>
      <col style="width: 64%"/>
     </colgroup>
     <thead>
      <tr>
       <th>
        Option Name
       </th>
       <th>
        Description
       </th>
      </tr>
     </thead>
     <tbody>
      <tr>
       <td>
        <a class="link" href="option-file-options.html#option_general_defaults-extra-file">
         --defaults-extra-file
        </a>
       </td>
       <td>
        Read named option file in addition to usual option files
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="option-file-options.html#option_general_defaults-file">
         --defaults-file
        </a>
       </td>
       <td>
        Read only named option file
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="option-file-options.html#option_general_defaults-group-suffix">
         --defaults-group-suffix
        </a>
       </td>
       <td>
        Option group suffix value
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_help">
         --help
        </a>
       </td>
       <td>
        Display help message and exit
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_host">
         --host
        </a>
       </td>
       <td>
        Host on which MySQL server is located
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="option-file-options.html#option_general_no-defaults">
         --no-defaults
        </a>
       </td>
       <td>
        Read no option files
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_password">
         --password
        </a>
       </td>
       <td>
        Accepted but always ignored. Whenever mysql_secure_installation is invoked, the user is prompted for a password, regardless
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_port">
         --port
        </a>
       </td>
       <td>
        TCP/IP port number for connection
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="option-file-options.html#option_general_print-defaults">
         --print-defaults
        </a>
       </td>
       <td>
        Print default options
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_protocol">
         --protocol
        </a>
       </td>
       <td>
        Transport protocol to use
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_socket">
         --socket
        </a>
       </td>
       <td>
        Unix socket file or Windows named pipe to use
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl">
         --ssl-ca
        </a>
       </td>
       <td>
        File that contains list of trusted SSL Certificate Authorities
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl">
         --ssl-capath
        </a>
       </td>
       <td>
        Directory that contains trusted SSL Certificate Authority certificate files
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl">
         --ssl-cert
        </a>
       </td>
       <td>
        File that contains X.509 certificate
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl">
         --ssl-cipher
        </a>
       </td>
       <td>
        Permissible ciphers for connection encryption
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl">
         --ssl-crl
        </a>
       </td>
       <td>
        File that contains certificate revocation lists
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl">
         --ssl-crlpath
        </a>
       </td>
       <td>
        Directory that contains certificate revocation-list files
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl-fips-mode">
         --ssl-fips-mode
        </a>
       </td>
       <td>
        Whether to enable FIPS mode on client side
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl">
         --ssl-key
        </a>
       </td>
       <td>
        File that contains X.509 key
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-command-options.html#option_mysql_ssl">
         --ssl-mode
        </a>
       </td>
       <td>
        Desired security state of connection to server
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl">
         --ssl-session-data
        </a>
       </td>
       <td>
        File that contains SSL session data
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl">
         --ssl-session-data-continue-on-failed-reuse
        </a>
       </td>
       <td>
        Whether to establish connections if session reuse fails
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_tls-ciphersuites">
         --tls-ciphersuites
        </a>
       </td>
       <td>
        Permissible TLSv1.3 ciphersuites for encrypted connections
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_tls-sni-servername">
         --tls-sni-servername
        </a>
       </td>
       <td>
        Server name supplied by the client
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_tls-version">
         --tls-version
        </a>
       </td>
       <td>
        Permissible TLS protocols for encrypted connections
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_use-default">
         --use-default
        </a>
       </td>
       <td>
        Execute with no user interactivity
       </td>
      </tr>
      <tr>
       <td>
        <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_user">
         --user
        </a>
       </td>
       <td>
        MySQL user name to use when connecting to server
       </td>
      </tr>
     </tbody>
    </table>
   </div>
   <div class="table-contents">
    <table cellpadding="0" cellspacing="0" style="position: fixed; top: 0px; display: none; left: 401px; width: 739px;">
     <thead>
      <tr>
       <th style="width: 260.906px;">
        Option Name
       </th>
       <th style="width: 477.094px;">
        Description
       </th>
      </tr>
     </thead>
    </table>
   </div>
  </div>
  <br class="table-break"/>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_help">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_help">
       <code class="option">
        --help
       </code>
      </a>
      ,
      <code class="option">
       -?
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for help">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --help
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320521792">
     </a>
     <a class="indexterm" name="idm46045320520336">
     </a>
     <p>
      Display a help message and exit.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_defaults-extra-file">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_defaults-extra-file">
       <code class="option">
        --defaults-extra-file=
        <em class="replaceable">
         <code>
          file_name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for defaults-extra-file">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --defaults-extra-file=file_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320508064">
     </a>
     <a class="indexterm" name="idm46045320506544">
     </a>
     <p>
      Read this option file after the global option file but (on
            Unix) before the user option file. If the file does not
            exist or is otherwise inaccessible, an error occurs. If
      <em class="replaceable">
       <code>
        file_name
       </code>
      </em>
      is not an absolute path
            name, it is interpreted relative to the current directory.
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_defaults-file">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_defaults-file">
       <code class="option">
        --defaults-file=
        <em class="replaceable">
         <code>
          file_name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for defaults-file">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --defaults-file=file_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          File name
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320492384">
     </a>
     <a class="indexterm" name="idm46045320490880">
     </a>
     <p>
      Use only the given option file. If the file does not exist
            or is otherwise inaccessible, an error occurs. If
      <em class="replaceable">
       <code>
        file_name
       </code>
      </em>
      is not an absolute path
            name, it is interpreted relative to the current directory.
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_defaults-group-suffix">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_defaults-group-suffix">
       <code class="option">
        --defaults-group-suffix=
        <em class="replaceable">
         <code>
          str
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for defaults-group-suffix">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --defaults-group-suffix=str
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320476880">
     </a>
     <a class="indexterm" name="idm46045320475360">
     </a>
     <p>
      Read not only the usual option groups, but also groups with
            the usual names and a suffix of
      <em class="replaceable">
       <code>
        str
       </code>
      </em>
      . For example,
      <a class="link" href="mysql-secure-installation.html" title="6.4.2 mysql_secure_installation — Improve MySQL Installation Security">
       <span class="command">
        <strong>
         mysql_secure_installation
        </strong>
       </span>
      </a>
      normally reads
            the
      <code class="literal">
       [client]
      </code>
      and
      <code class="literal">
       [mysql_secure_installation]
      </code>
      groups. If
            this option is given as
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_defaults-group-suffix">
       <code class="option">
        --defaults-group-suffix=_other
       </code>
      </a>
      ,
      <a class="link" href="mysql-secure-installation.html" title="6.4.2 mysql_secure_installation — Improve MySQL Installation Security">
       <span class="command">
        <strong>
         mysql_secure_installation
        </strong>
       </span>
      </a>
      also reads the
      <code class="literal">
       [client_other]
      </code>
      and
      <code class="literal">
       [mysql_secure_installation_other]
      </code>
      groups.
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_host">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_host">
       <code class="option">
        --host=
        <em class="replaceable">
         <code>
          host_name
         </code>
        </em>
       </code>
      </a>
      ,
      <code class="option">
       -h
       <em class="replaceable">
        <code>
         host_name
        </code>
       </em>
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for host">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --host
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320456448">
     </a>
     <a class="indexterm" name="idm46045320454992">
     </a>
     <p>
      Connect to the MySQL server on the given host.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_no-defaults">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_no-defaults">
       <code class="option">
        --no-defaults
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for no-defaults">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --no-defaults
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320445008">
     </a>
     <a class="indexterm" name="idm46045320443504">
     </a>
     <p>
      Do not read any option files. If program startup fails due
            to reading unknown options from an option file,
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_no-defaults">
       <code class="option">
        --no-defaults
       </code>
      </a>
      can be used to prevent them from being read.
     </p>
     <p>
      The exception is that the
      <code class="filename">
       .mylogin.cnf
      </code>
      file is read in all cases, if it exists. This permits
            passwords to be specified in a safer way than on the command
            line even when
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_no-defaults">
       <code class="option">
        --no-defaults
       </code>
      </a>
      is used. To create
      <code class="filename">
       .mylogin.cnf
      </code>
      , use
            the
      <a class="link" href="mysql-config-editor.html" title="6.6.7 mysql_config_editor — MySQL Configuration Utility">
       <span class="command">
        <strong>
         mysql_config_editor
        </strong>
       </span>
      </a>
      utility. See
      <a class="xref" href="mysql-config-editor.html" title="6.6.7 mysql_config_editor — MySQL Configuration Utility">
       Section 6.6.7, “mysql_config_editor — MySQL Configuration Utility”
      </a>
      .
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_password">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_password">
       <code class="option">
        --password=
        <em class="replaceable">
         <code>
          password
         </code>
        </em>
       </code>
      </a>
      ,
      <code class="option">
       -p
       <em class="replaceable">
        <code>
         password
        </code>
       </em>
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for password">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --password=password
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [none]
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320420976">
     </a>
     <a class="indexterm" name="idm46045320419472">
     </a>
     <p>
      This option is accepted but ignored. Whether or not this
            option is used,
      <a class="link" href="mysql-secure-installation.html" title="6.4.2 mysql_secure_installation — Improve MySQL Installation Security">
       <span class="command">
        <strong>
         mysql_secure_installation
        </strong>
       </span>
      </a>
      always prompts the user for a password.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_port">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_port">
       <code class="option">
        --port=
        <em class="replaceable">
         <code>
          port_num
         </code>
        </em>
       </code>
      </a>
      ,
      <code class="option">
       -P
       <em class="replaceable">
        <code>
         port_num
        </code>
       </em>
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for port">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --port=port_num
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Numeric
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           3306
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320402976">
     </a>
     <a class="indexterm" name="idm46045320401520">
     </a>
     <a class="indexterm" name="idm46045320400016">
     </a>
     <p>
      For TCP/IP connections, the port number to use.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_print-defaults">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_print-defaults">
       <code class="option">
        --print-defaults
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for print-defaults">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --print-defaults
          </code>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320390464">
     </a>
     <a class="indexterm" name="idm46045320388960">
     </a>
     <p>
      Print the program name and all options that it gets from
            option files.
     </p>
     <p>
      For additional information about this and other option-file
            options, see
      <a class="xref" href="option-file-options.html" title="6.2.2.3 Command-Line Options that Affect Option-File Handling">
       Section 6.2.2.3, “Command-Line Options that Affect Option-File Handling”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_protocol">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_protocol">
       <code class="option">
        --protocol={TCP|SOCKET|PIPE|MEMORY}
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for protocol">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --protocol=type
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           [see text]
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Valid Values
         </th>
         <td>
          <p class="valid-value">
           <code class="literal">
            TCP
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            SOCKET
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            PIPE
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            MEMORY
           </code>
          </p>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320367808">
     </a>
     <a class="indexterm" name="idm46045320366304">
     </a>
     <p>
      The transport protocol to use for connecting to the server.
            It is useful when the other connection parameters normally
            result in use of a protocol other than the one you want. For
            details on the permissible values, see
      <a class="xref" href="transport-protocols.html" title="6.2.7 Connection Transport Protocols">
       Section 6.2.7, “Connection Transport Protocols”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_socket">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_socket">
       <code class="option">
        --socket=
        <em class="replaceable">
         <code>
          path
         </code>
        </em>
       </code>
      </a>
      ,
      <code class="option">
       -S
       <em class="replaceable">
        <code>
         path
        </code>
       </em>
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for socket">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --socket={file_name|pipe_name}
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320352816">
     </a>
     <a class="indexterm" name="idm46045320351312">
     </a>
     <p>
      For connections to
      <code class="literal">
       localhost
      </code>
      , the Unix
            socket file to use, or, on Windows, the name of the named
            pipe to use.
     </p>
     <p>
      On Windows, this option applies only if the server was
            started with the
      <a class="link" href="server-system-variables.html#sysvar_named_pipe">
       <code class="literal">
        named_pipe
       </code>
      </a>
      system variable enabled to support named-pipe connections.
            In addition, the connection must be a member of the Windows
            group specified by the
      <a class="link" href="server-system-variables.html#sysvar_named_pipe_full_access_group">
       <code class="literal">
        named_pipe_full_access_group
       </code>
      </a>
      system variable.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_ssl">
      </a>
      <code class="option">
       --ssl*
      </code>
     </p>
     <a class="indexterm" name="idm46045320343648">
     </a>
     <a class="indexterm" name="idm46045320342192">
     </a>
     <p>
      Options that begin with
      <code class="option">
       --ssl
      </code>
      specify
            whether to connect to the server using encryption and
            indicate where to find SSL keys and certificates. See
      <a class="xref" href="connection-options.html#encrypted-connection-options" title="Command Options for Encrypted Connections">
       Command Options for Encrypted Connections
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_ssl-fips-mode">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl-fips-mode">
       <code class="option">
        --ssl-fips-mode={OFF|ON|STRICT}
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for ssl-fips-mode">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --ssl-fips-mode={OFF|ON|STRICT}
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Deprecated
         </th>
         <td>
          Yes
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Enumeration
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <code class="literal">
           OFF
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Valid Values
         </th>
         <td>
          <p class="valid-value">
           <code class="literal">
            OFF
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            ON
           </code>
          </p>
          <p class="valid-value">
           <code class="literal">
            STRICT
           </code>
          </p>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320319904">
     </a>
     <a class="indexterm" name="idm46045320318400">
     </a>
     <p>
      Controls whether to enable FIPS mode on the client side. The
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl-fips-mode">
       <code class="option">
        --ssl-fips-mode
       </code>
      </a>
      option differs from other
      <code class="option">
       --ssl-
       <em class="replaceable">
        <code>
         xxx
        </code>
       </em>
      </code>
      options in that it is not used to establish encrypted
            connections, but rather to affect which cryptographic
            operations to permit. See
      <a class="xref" href="fips-mode.html" title="8.8 FIPS Support">
       Section 8.8, “FIPS Support”
      </a>
      .
     </p>
     <p>
      These
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl-fips-mode">
       <code class="option">
        --ssl-fips-mode
       </code>
      </a>
      values are permitted:
     </p>
     <div class="itemizedlist">
      <ul class="itemizedlist" style="list-style-type: circle; ">
       <li class="listitem">
        <p>
         <code class="literal">
          OFF
         </code>
         : Disable FIPS mode.
        </p>
       </li>
       <li class="listitem">
        <p>
         <code class="literal">
          ON
         </code>
         : Enable FIPS mode.
        </p>
       </li>
       <li class="listitem">
        <p>
         <code class="literal">
          STRICT
         </code>
         : Enable
         <span class="quote">
          “
          <span class="quote">
           strict
          </span>
          ”
         </span>
         FIPS mode.
        </p>
       </li>
      </ul>
     </div>
     <div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
      <div class="admon-title">
       Note
      </div>
      <p>
       If the OpenSSL FIPS Object Module is not available, the
              only permitted value for
       <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl-fips-mode">
        <code class="option">
         --ssl-fips-mode
        </code>
       </a>
       is
       <code class="literal">
        OFF
       </code>
       . In this case, setting
       <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_ssl-fips-mode">
        <code class="option">
         --ssl-fips-mode
        </code>
       </a>
       to
       <code class="literal">
        ON
       </code>
       or
       <code class="literal">
        STRICT
       </code>
       causes the client to produce a warning at startup and to
              operate in non-FIPS mode.
      </p>
     </div>
     <p>
      This option is deprecated. Expect it to be removed in a
            future version of MySQL.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_tls-ciphersuites">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_tls-ciphersuites">
       <code class="option">
        --tls-ciphersuites=
        <em class="replaceable">
         <code>
          ciphersuite_list
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for tls-ciphersuites">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --tls-ciphersuites=ciphersuite_list
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320291216">
     </a>
     <a class="indexterm" name="idm46045320289712">
     </a>
     <p>
      The permissible ciphersuites for encrypted connections that
            use TLSv1.3. The value is a list of one or more
            colon-separated ciphersuite names. The ciphersuites that can
            be named for this option depend on the SSL library used to
            compile MySQL. For details, see
      <a class="xref" href="encrypted-connection-protocols-ciphers.html" title="8.3.2 Encrypted Connection TLS Protocols and Ciphers">
       Section 8.3.2, “Encrypted Connection TLS Protocols and Ciphers”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_tls-sni-servername">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_tls-sni-servername">
       <code class="option">
        --tls-sni-servername=
        <em class="replaceable">
         <code>
          server_name
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for tls-sni-servername">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --tls-sni-servername=server_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320276640">
     </a>
     <a class="indexterm" name="idm46045320275120">
     </a>
     <p>
      When specified, the name is passed to the
      <code class="literal">
       libmysqlclient
      </code>
      C API library using the
      <code class="literal">
       MYSQL_OPT_TLS_SNI_SERVERNAME
      </code>
      option of
      <a class="ulink" href="/doc/c-api/8.4/en/mysql-options.html" target="_top">
       <code class="literal">
        mysql_options()
       </code>
      </a>
      . The server
            name is not case-sensitive. To show which server name the
            client specified for the current session, if any, check the
      <a class="link" href="server-status-variables.html#statvar_Tls_sni_server_name">
       <code class="literal">
        Tls_sni_server_name
       </code>
      </a>
      status
            variable.
     </p>
     <p>
      Server Name Indication (SNI) is an extension to the TLS
            protocol (OpenSSL must be compiled using TLS extensions for
            this option to function). The MySQL implementation of SNI
            represents the client-side only.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_tls-version">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_tls-version">
       <code class="option">
        --tls-version=
        <em class="replaceable">
         <code>
          protocol_list
         </code>
        </em>
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for tls-version">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --tls-version=protocol_list
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
        <tr>
         <th>
          Default Value
         </th>
         <td>
          <p class="valid-value">
           <code class="literal">
            TLSv1,TLSv1.1,TLSv1.2,TLSv1.3
           </code>
           (OpenSSL 1.1.1 or higher)
          </p>
          <p class="valid-value">
           <code class="literal">
            TLSv1,TLSv1.1,TLSv1.2
           </code>
           (otherwise)
          </p>
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320254160">
     </a>
     <a class="indexterm" name="idm46045320252656">
     </a>
     <p>
      The permissible TLS protocols for encrypted connections. The
            value is a list of one or more comma-separated protocol
            names. The protocols that can be named for this option
            depend on the SSL library used to compile MySQL. For
            details, see
      <a class="xref" href="encrypted-connection-protocols-ciphers.html" title="8.3.2 Encrypted Connection TLS Protocols and Ciphers">
       Section 8.3.2, “Encrypted Connection TLS Protocols and Ciphers”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_use-default">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_use-default">
       <code class="option">
        --use-default
       </code>
      </a>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for use-default">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --use-default
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          Boolean
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320239920">
     </a>
     <a class="indexterm" name="idm46045320238416">
     </a>
     <p>
      Execute noninteractively. This option can be used for
            unattended installation operations.
     </p>
    </li>
    <li class="listitem">
     <p>
      <a name="option_mysql_secure_installation_user">
      </a>
      <a class="link" href="mysql-secure-installation.html#option_mysql_secure_installation_user">
       <code class="option">
        --user=
        <em class="replaceable">
         <code>
          user_name
         </code>
        </em>
       </code>
      </a>
      ,
      <code class="option">
       -u
       <em class="replaceable">
        <code>
         user_name
        </code>
       </em>
      </code>
     </p>
     <div class="informaltable">
      <table frame="box" rules="all" summary="Properties for user">
       <colgroup>
        <col style="width: 30%"/>
        <col style="width: 70%"/>
       </colgroup>
       <tbody>
        <tr>
         <th>
          Command-Line Format
         </th>
         <td>
          <code class="literal">
           --user=user_name
          </code>
         </td>
        </tr>
        <tr>
         <th>
          Type
         </th>
         <td>
          String
         </td>
        </tr>
       </tbody>
      </table>
     </div>
     <a class="indexterm" name="idm46045320225728">
     </a>
     <a class="indexterm" name="idm46045320224272">
     </a>
     <p>
      The user name of the MySQL account to use for connecting to
            the server.
     </p>
    </li>
   </ul>
  </div>
 </div>
 <br/>
</div>
