Configure a Secure TLS Version (SSL_VERSIONS)

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Perform the following to determine if SSL_VERSIONS is set. 1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command: db2 => get database manager configuration 3. Locate the value of SSL_VERSIONS in the output: SSL versions (SSL_VERSIONS) = At the current time, either having SSL_VERSIONS not set, or set to either or both of TLSV12 and TLSV13 is a pass. This may change in future updates if there are changes to the accepted security of TLS versions.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Perform the following to set SSL_VERSIONS: 1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command to enable TLS 1.3 within the Db2 server. db2 => update dbm cfg using SSL_VERSIONS TLSV13