Configure a Secure TLS Version (SSL_VERSIONS)

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Perform the following to determine if SSL_VERSIONS is set. 1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command: db2 => get database manager configuration 3. Locate the value of SSL_VERSIONS in the output: SSL versions (SSL_VERSIONS) = At the current time, either having SSL_VERSIONS not set, or set to either or both of TLSV12 and TLSV13 is a pass. This may change in future updates if there are changes to the accepted security of TLS versions.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Perform the following to set SSL_VERSIONS: 1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command to enable TLS 1.3 within the Db2 server. db2 => update dbm cfg using SSL_VERSIONS TLSV13