Server System Variables Scope Global Dynamic Yes SET_VAR  Hint Applies No Type Boolean Default Value ON When this variable has a value of 1 (the default), the server automatically grants the  EXECUTE  and ALTER ROUTINE  privileges to the creator of a stored routine, if the user cannot already execute and alter or drop the routine. (The  ALTER ROUTINE  privilege is required to drop the routine.) The server also automatically drops those privileges from the creator when the routine is dropped. If automatic_sp_privileges  is 0, the server does not automatically add or drop these privileges. The creator of a routine is the account used to execute the  CREATE  statement for it. This might not be the same as the account named as the  DEFINER  in the routine definition. If you start  mysqld  with  --skip-new ,  automatic_sp_privileges  is set to  OFF . See also Section 25.2.2, “Stored Routines and MySQL Privileges” . • auto_generate_certs Command-Line Format --auto-generate-certs[={OFF|ON}] System Variable auto_generate_certs Scope Global Dynamic No SET_VAR  Hint Applies No Type Boolean Default Value ON This variable controls whether the server autogenerates SSL key and certificate files in the data directory, if they do not already exist. At startup, the server automatically generates server-side and client-side SSL certificate and key files in the data directory if the  auto_generate_certs  system variable is enabled, no SSL options other than  --ssl  are specified, and the server-side SSL files are missing from the data directory. These files enable secure client connections using SSL; see Section 6.3.1, “Configuring MySQL to Use Encrypted Connections” . For more information about SSL file autogeneration, including file names and characteristics, see Section 6.3.3.1, “Creating SSL and RSA Certificates and Keys using MySQL” The  sha256_password_auto_generate_rsa_keys  and caching_sha2_password_auto_generate_rsa_keys  system variables are related but control autogeneration of RSA key-pair files needed for secure password exchange using RSA over unencypted connections. • avoid_temporal_upgrade Command-Line Format --avoid-temporal-upgrade[={OFF|ON}] Deprecated Yes 770