TMA-DB2-8.2.14
Key Rotation in HADR Environment
Descripción
Some additional considerations are needed when working in an HADR environment. A key rotation on the primary database in an HADR environment drives a key rotation automatically on the standby. The change, however, does not occur until other log records are sent to the standby database. If you want to force the rotated key to the standby, the archive log command can be used to generate the log ...
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
You can check what values you have set for these parameters as follows on each HADR member: db2 => get dbm cfg | grep KEYSTORE Keystore type (KEYSTORE_TYPE) = PKCS12 Keystore location (KEYSTORE_LOCATION) = /path/to/file.p12 We recommend you use a centralized key manager for HADR environments.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Retain all Master Keys until you are certain they are not use on any of the hosts in an HADR environment. The same DEK and master key is used on all members in a DPF or pureScale deployment and each member requires access to the keystore to access master keys, which can be a shared file. 9 Additional Considerations This section provides additional considerations on protecting and maintaining the database instance.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- db2databasemanual
- Referencia
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 8.2.14 Key Rotation in HADR Environment