TMA-DB2-8.1.11

Enable Remote TLS Connections to Db2 (DB2COMM)

높음레벨 1수동 검토db2

설명

The DB2COMM registry variable controls what types of remote connections Db2 will accept. It can be configured to enable plaintext communication, encrypted communication, or both.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Perform the following to determine if DB2COMM is set. 1. As the instance owner, run the following command. db2set -all DB2COMM 2. The value of DB2COMM will be returned in the output. If the DB2COMM registry variable is not set, the db2set command will not return any data. [i] TCPIP

조치 방법

조치 방식: 가이드 또는 인프라 패치

Perform the following to set DB2COMM and enable TLS: 1. Run the following command as the instance owner. db2set DB2COMM=SSL Db2 must be recycled (db2stop/db2start) for changes to the DB2COMM registry variable to take effect.

속성

운영 체제: 모두
태그: db2databasemanual
참고 자료: CIS IBM Db2 12.1 Benchmark v1.0.0 - 8.1.11 Enable Remote TLS Connections to Db2 (DB2COMM)