Configure a Secure TLS Version (SSL_VERSIONS)

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Perform the following to determine if SSL_VERSIONS is set. 1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command: db2 => get database manager configuration 3. Locate the value of SSL_VERSIONS in the output: SSL versions (SSL_VERSIONS) = At the current time, either having SSL_VERSIONS not set, or set to either or both of TLSV12 and TLSV13 is a pass. This may change in future updates if there are changes to the accepted security of TLS versions.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Perform the following to set SSL_VERSIONS: 1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command to enable TLS 1.3 within the Db2 server. db2 => update dbm cfg using SSL_VERSIONS TLSV13