TMA-DB2-8.2.14
Key Rotation in HADR Environment
Deskripsi
Some additional considerations are needed when working in an HADR environment. A key rotation on the primary database in an HADR environment drives a key rotation automatically on the standby. The change, however, does not occur until other log records are sent to the standby database. If you want to force the rotated key to the standby, the archive log command can be used to generate the log ...
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
You can check what values you have set for these parameters as follows on each HADR member: db2 => get dbm cfg | grep KEYSTORE Keystore type (KEYSTORE_TYPE) = PKCS12 Keystore location (KEYSTORE_LOCATION) = /path/to/file.p12 We recommend you use a centralized key manager for HADR environments.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Retain all Master Keys until you are certain they are not use on any of the hosts in an HADR environment. The same DEK and master key is used on all members in a DPF or pureScale deployment and each member requires access to the keystore to access master keys, which can be a shared file. 9 Additional Considerations This section provides additional considerations on protecting and maintaining the database instance.
Properti
- Sistem operasi
- Apa saja
- Tag
- db2databasemanual
- Referensi
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 8.2.14 Key Rotation in HADR Environment