Secure all remote connections by using SSL

高级别 1人工审核db2-zos

说明

The z/OS communications server for TCP/IP supports the Application Transport Transparent Layer Security (AT-TLS) function. AT-TLS performs TLS on behalf of Db2. It invokes the z/OS system SSL in the TCP layer of the TCP/IP stack and protects the transmission of data. It is recommended to configure AT-TLS to use SSL connections to secure all Db2 remote access.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

1. See "Encrypting your data with Secure Socket Layer (SSL) support" and "IBM Db2 for z/OS: Configuring TLS/SSL for Secure Client/Server Communications" for more information. 2. To allow only SSL connections to Db2, verify that the TCP/IP PORT field is set to the same value as the SECURE PORT field and that both static and dynamic subsetting location aliases are defined with the same value as PORT and SECPORT.

修复方式

修复方法: 操作指南或基础设施补丁

Update the port values by using either the DSNJ003 utility (DDF statement) or the MODIFY DDF command.

属性

操作系统: 任意
标签: db2-zoshardening
参考: CIS IBM Db2 13 for z/OS Benchmark v1.0.0 - 2.1.4 Secure all remote connections by using SSL