Security enhancements

The Db2 12.1.3 release improves security with enhancements to authentication using Java Web Tokens (JWTs), as well as a new ASCII format export option for Db2 audit logs.

The following table lists security enhancements that have been added to Db2® 12.1.3:
Table 1. Security enhancements in 12.1.3
Enhancement Description
New ASCII format export option for Db2 audit logs. Audit logs are normally stored in binary format, which requires some work to get into a readable format for users. With the release of Db2 12.1.3, audit logs can be written directly in a delimited ASCII format that is suitable for analysis. The db2audit extract command supports writing output files directly to a remote storage bucket. For more information, see db2audit - Audit facility administrator tool command.
Enforce audience claim in a JSON Web Token (JWT). When authenticating with a JWT, Db2 now supports enforcement of the audience claim, allowing you to ensure the JWT was meant for Db2 and not another application. For more information see Token authentication.