Failed to connect to database: Access denied for user – Database Console SSL configuration unresolved

Answer the exact question first

When the IntelliJ Database Console reports "Failed to connect to database: Access denied for user" and the target database requires SSL, the most common cause is that the data‑source is connecting over plain TCP while the server’s account is created with REQUIRE SSL (MySQL) or SSLMODE=REQUIRED (PostgreSQL). IntelliJ does not provide an automatic wizard to enable SSL; the user must explicitly enable the SSL toggle or add the appropriate driver property to the JDBC URL.

Why IntelliJ doesn’t enforce SSL automatically

• The Database tool merely passes the JDBC URL and driver properties to the driver. It has no built‑in enforcement mechanism.
• Most JDBC drivers default to sslMode=PREFERRED (MySQL) or sslmode=prefer (PostgreSQL), so the driver will attempt TLS if the server advertises support. If the driver is configured with useSSL=false or the URL lacks sslmode, the handshake will be plaintext.
• The warning “SSL connection is not configured” is an informational prompt, not a hard block. JetBrains has not announced future enforcement of SSL.

Steps to fix the connection

1. Open the Data Source dialog – In the Database tool window, right‑click the data source and choose Properties.
2. Verify credentials – Ensure the user name and password are correct and that the account is allowed from the host you’re connecting from. A mismatch here will also trigger the same error.
3. Enable SSL – On the General tab, check the Use SSL checkbox (or Use SSH tunnel if you’re using SSH). For MySQL, you can also add sslMode=REQUIRED to the JDBC URL. For PostgreSQL, add sslmode=require.
4. Provide certificates (if required) – If the server enforces client certificates, click the Certificates tab and upload the CA certificate, client certificate, and key files.
5. Test the connection – Click Test Connection. A successful test will show a green check and the server version. If it still fails, read the full error message in the log panel.

Confirm the driver behavior

Open the Advanced tab and note the actual JDBC URL and driver version. For example, a MySQL URL might look like:

jdbc:mysql://db.example.com:3306/mydb?sslMode=REQUIRED

or a PostgreSQL URL like:

jdbc:postgresql://db.example.com:5432/mydb?sslmode=require

Ensure that the driver version bundled with IntelliJ matches the one that supports the chosen sslMode parameter.

When to suspect other causes

• If the password is omitted, the error will include using password: NO.
• If the account is host‑restricted (e.g., 'user'@'192.168.1.%'), the server will reject connections from other hosts even with correct credentials.
• For MySQL with the caching_sha2_password plugin, a non‑TLS connection may fail due to public key retrieval restrictions, which can also surface as an access‑denied message.

Missing diagnostic detail

To narrow the issue further, please provide the full error line (including any driver‑specific text) and the database type (MySQL, PostgreSQL, SQL Server, etc.). These details determine whether the problem is purely credential‑based or involves SSL negotiation.

Summary

IntelliJ does not auto‑prompt for SSL; you must enable it manually in the data‑source settings or append the correct driver parameter to the JDBC URL. The “Access denied for user” error in this context usually indicates that the database account requires SSL and the connection was made over plaintext. Verify credentials, enable SSL, and test again. If the problem persists, share the complete error message and DBMS type for deeper analysis.