> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flexagon.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring the OCI Plugin and Cloud Account

> To use the FlexDeploy OCI Plugin, follow these steps to get the information FlexDeploy requires to connect. Create User in IAM/IDCS Create a user in I

To use the FlexDeploy OCI Plugin, follow these steps to get the information FlexDeploy requires to connect.

* [Create User in IAM/IDCS](https://flexagon.atlassian.net/wiki/spaces/FD60/pages/9856628081/Configuring+the+OCI+Plugin?force_transition=e203e25b-a871-4884-862a-ae5b8529a03f#Create-User-in-IAM%2FIDCS)

* [Prepare and configure PEM Key](https://flexagon.atlassian.net/wiki/spaces/FD60/pages/9856628081/Configuring+the+OCI+Plugin?force_transition=e203e25b-a871-4884-862a-ae5b8529a03f#Prepare-and-configure-PEM-Key)

  * [Generate API Signing Key](https://flexagon.atlassian.net/wiki/spaces/FD60/pages/9856628081/Configuring+the+OCI+Plugin?force_transition=e203e25b-a871-4884-862a-ae5b8529a03f#Generate-API-Signing-Key)

# Create User in IAM/IDCS

Create a user in IAM/IDCS for FlexDeploy to connect with and put that user in at least one group with any desired permissions. You can skip this if the user exists already. We will create the API Key for this user.

# Prepare and configure PEM Key

## Generate API Signing Key

Navigate to [https://cloud.oracle.com/identity/domains/my-profile/api-keys](https://cloud.oracle.com/identity/domains/my-profile/api-keys) if you are using your own account. Otherwise, browse to the correct user and click Api Keys on the left side.

Click Add API Key.

Click Download private Key.

![image-20250317-215603.png](https://mintcdn.com/flexagon-llc-ce77a95c/d70xZJSQ0kNavvGo/images/fd90/11458838582.png?fit=max\&auto=format\&n=d70xZJSQ0kNavvGo\&q=85\&s=b26e59b29ef9ea20133482a87274165d)

Click Add.

Your fingerprint, user, and tenancy will be shown on the confirmation screen. You will need all of them, so don’t lose, them. Copy them to notepad or something to keep them safe before you start filling them into FlexDeploy.

These lines are all entered into FlexDeploy.

```
user=ocid1.user.oc1..aaaaaaaasdf4jenjm7ntxha
fingerprint=30:f6:71:3e:4e:a4:1a:75:44:7d:93:e4:db:23:a9:90
tenancy=ocid1.tenancy.oc1..aaaaaaaahpejx74d6msdfwerzhlgdqwxfxmrwivslyktofveiwq
region=us-ashburn-1
```

If you made a system user that doesn’t need to login without an API Key, turn off the other authentication methods:

![image-20250318-195629.png](https://mintcdn.com/flexagon-llc-ce77a95c/NkeZh5D-Nf8j_WaD/images/fd111/12596413030.png?fit=max\&auto=format\&n=NkeZh5D-Nf8j_WaD\&q=85\&s=27fb764da353aaadda262514d74e855e)

## Configuring the Cloud Account

OCI plugin operations require the `FDOCI_CLOUD_ACCOUNT_CODE`target property. The cloud account can be managed directly through the target property drop-down (available since version FlexDeploy 9.0.0.4) or on the Integrations > Cloud page. Below is a description of the OIC cloud account properties. To validate your configurations, use the **Test Connection** option.

Prior to FlexDeploy 9.0.0.5, `OAuthJWTAssertion` required using a Java KeyStore for the Private Key and Certificate. When upgrading from FlexDeploy 9.0.0.4 or earlier, the OIC cloud account will automatically migrate to use Private Key and Certificate credentials from the configured KeyStore, eliminating the need to maintain the KeyStore on the file system. As a result, the KeyStore Path, KeyStore Password, Private Key Alias, Private Key Password, and Certificate Algorithm properties are now replaced with the Private Key and Certificate properties.

<table><colgroup><col /><col /><col /><col /><col /></colgroup><tbody><tr><th>**Property Name**</th><th>**Property Code**</th><th>**Required**</th><th>**Description**</th><th>**From Above, use**</th></tr><tr><td>OCI Tenancy Id</td><td>`FDOCIACCT_TENANCY_ID`</td><td>Yes</td><td>Select the OCI Tenancy Id to use.</td><td>`tenancy`</td></tr><tr><td>OCI User OCID</td><td>`FDOCIACCT_USER_OCID`</td><td>Yes</td><td>The OCID of the user to connect to OCI as.</td><td>`user`</td></tr><tr><td>OCI Key Fingerprint</td><td>`FDOCIACCT_KEY_FINGERPRINT`</td><td>Yes</td><td>The md5 fingerprint of the public key you uploaded for authentication.</td><td>`fingerprint`</td></tr><tr><td>OCI Region</td><td>`FDOCIACCT_REGION`</td><td>Yes</td><td>The region where your OCI instance is located. For example: us-phoenix-1</td><td>`region`</td></tr><tr><td>OCI Private Key Content</td><td>`FDOCIACCT_PRIVATE_KEY`</td><td>Yes</td><td>The private key to use for authentication.</td><td>Is downloaded separately using directions above. Upload it.</td></tr></tbody></table>