Configuring TLS Support in a Db2 Server using a CA-signed certificate

The Db2 database system supports Transport Layer Security (TLS), which means that a Db2 client application that also supports TLS can connect to a Db2 database by using a TLS socket. Applications that support TLS include CLI, CLP, and .Net Data Provider client applications, as well as applications that use the IBM® Data Server Driver for JDBC and SQLJ for type 4 connections.

Before you begin

This task configures a Db2® server for TLS support by using a certificate signed by a certificate authority (CA). A CA can be a party or department within your organization or it can be a third party.

About this task

To configure TLS support for a Db2 server by using a CA-signed certificate, you need to complete the following sub-tasks:
  1. Create a keystore using GSKit.
  2. Create a certificate signing request (CSR).
  3. Add root and intermediate certificates to your keystore.
  4. Pull your CA-signed certificate into your keystore.
  5. Configure TLS support for the Db2 server.