Enforcing TLS for databases present in the system catalogs

In addition to CLI and Embedded SQL applications, the TLSVersion can be applied to cataloged databases.

About this task

TLS version can be applied to a specific cataloged database or to all databases in the system catalogs and those referenced in the db2dsdriver.cfg file.

Procedure

TLS 1.3 is supported in Db2 11.5.8 and later. To enable TLS 1.3 for a specific cataloged database, enter the following values in the db2dsdriver.cfg file:
```
<configuration>
   <databases>
      <database name="<name>" host="<host_ip>" port="<port_number>">
         <parameter name="TLSVersion" value="TLSV13"/>
      </database>
   </databases>
</configuration>
```
where
- <name> is the name of the cataloged database.
- <host_ip> is the address of the cataloged database.
- <port_number> is the port assigned to the cataloged database.
To enable TLS 1.3 for all database in both the system catalogs and the db2dsdriver.cfg file, set the TLS version value in the global variables section of the configuration file:
```
<configuration>
   <parameters>
      <parameter name="TLSVersion" value="TLSV13"/>
   </parameters>
</configuration>
```