Enable Remote TLS Connections to Db2 (DB2COMM)

TinggiLevel 1Tinjauan manualdb2

Deskripsi

The DB2COMM registry variable controls what types of remote connections Db2 will accept. It can be configured to enable plaintext communication, encrypted communication, or both.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Perform the following to determine if DB2COMM is set. 1. As the instance owner, run the following command. db2set -all DB2COMM 2. The value of DB2COMM will be returned in the output. If the DB2COMM registry variable is not set, the db2set command will not return any data. [i] TCPIP

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Perform the following to set DB2COMM and enable TLS: 1. Run the following command as the instance owner. db2set DB2COMM=SSL Db2 must be recycled (db2stop/db2start) for changes to the DB2COMM registry variable to take effect.

Properti

Sistem operasi: Apa saja
Tag: db2databasemanual
Referensi: CIS IBM Db2 12.1 Benchmark v1.0.0 - 8.1.11 Enable Remote TLS Connections to Db2 (DB2COMM)