Secure all remote connections by using SSL

TinggiLevel 1Tinjauan manualdb2-zos

Deskripsi

The z/OS communications server for TCP/IP supports the Application Transport Transparent Layer Security (AT-TLS) function. AT-TLS performs TLS on behalf of Db2. It invokes the z/OS system SSL in the TCP layer of the TCP/IP stack and protects the transmission of data. It is recommended to configure AT-TLS to use SSL connections to secure all Db2 remote access.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

1. See "Encrypting your data with Secure Socket Layer (SSL) support" and "IBM Db2 for z/OS: Configuring TLS/SSL for Secure Client/Server Communications" for more information. 2. To allow only SSL connections to Db2, verify that the TCP/IP PORT field is set to the same value as the SECURE PORT field and that both static and dynamic subsetting location aliases are defined with the same value as PORT and SECPORT.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Update the port values by using either the DSNJ003 utility (DDF statement) or the MODIFY DDF command.

Properti

Sistem operasi: Apa saja
Tag: db2-zoshardening
Referensi: CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 2.1.4 Secure all remote connections by using SSL