IBM Db2
TMA-DB2-8.2.5
Backup the Stash File
LowLevel 2Manual reviewdb2
Description
A stash file is an obfuscated file that contains the credentials that are needed to access the keystore. If a keystore password was not provided during db2start, the password will be retrieved from the stash file. A stash file is created when -stash command is used during the creation of the keystore.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Check that the stash file has been backed up according to company policy.
How it is fixed
Fix method: Guidance or infrastructure patch
Backup the stash file to a safe location.
Properties
- Operating systems
- Any
- Tags
- db2databasemanual
- Reference
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 8.2.5 Backup the Stash File