The Db2® database system offers several ways to encrypt data, both while in storage, and while in transit over the network.
Encrypting data at rest
- You can use Db2 native encryption to encrypt your databases and backup images.
- You can use IBM® InfoSphere® Guardium® Data Encryption to encrypt the underlying operating system data and backup files.
- You can use encrypted file system (EFS) to encrypt your operating system data and backup files. Use EFS if you are running a Db2 system on the AIX® operating system, and you are interested in file-level encryption only.
Encrypting data in transit
To encrypt data in-transit between clients and Db2 databases, use the Db2 database system support of TLS (Transport Layer Security).
recommend that you use Db2 support for TLS to encrypt
communication between the following:
- Db2 clients and servers
- Primary and Standby nodes in a Db2 HADR environment
- Db2 clients
and a Db2
Federation serverNote: Db2 Federation Server also supports TLS encryption of outbound transmissions to some data sources.