TMA-DB2-8.2.7
Backup Your Keystore
LowLevel 2Manual reviewdb2
Description
The keystore stores encryption keys used to encrypt your database. Losing the key will make the data inaccessible. If the keystore with encryption keys is lost, there is no way to decrypt the data.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Check that you are backing up your keystore regularly. Keep in mind that even if the encryption key has been rotated, logs may still need access to the old key. Do not delete keys.
How it is fixed
Fix method: Guidance or infrastructure patch
Regularly backup your keystore and stash files, using mechanisms outside of Db2.
Properties
- Operating systems
- Any
- Tags
- db2databasemanual
- Reference
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 8.2.7 Backup Your Keystore