TMAegis
Više pravila za db2

TMA-DB2-8.1.5

Configure a Secure TLS Version (SSL_VERSIONS)

VisokaNivo 1Ručni pregleddb2

Opis

The SSL_VERSIONS database manager configuration parameter controls which versions of the TLS protocol Db2 enables. Default: At the DB2 server, TLS 1.2 and TLS 1.3 are enabled by default if SSL_VERSIONS is not set.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Perform the following to determine if SSL_VERSIONS is set. 1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command: db2 => get database manager configuration 3. Locate the value of SSL_VERSIONS in the output: SSL versions (SSL_VERSIONS) = At the current time, either having SSL_VERSIONS not set, or set to either or both of TLSV12 and TLSV13 is a pass. This may change in future updates if there are changes to the accepted security of TLS versions.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Perform the following to set SSL_VERSIONS: 1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command to enable TLS 1.3 within the Db2 server. db2 => update dbm cfg using SSL_VERSIONS TLSV13

Svojstva

Operativni sistemi
Bilo koji
Oznake
db2databasemanual
Referenca
CIS IBM Db2 12.1 Benchmark v1.0.0 - 8.1.5 Configure a Secure TLS Version (SSL_VERSIONS)