Locating the keystore for a Db2 or Db2 Warehouse database

You can use a database manager configuration parameter to locate the encryption keystore for a Db2 or Db2 Warehouse database on Red Hat OpenShift.

About this task

The keystore is used for Db2 or Db2 Warehouse native encryption for data at rest. You might need to know the keystore location if you are performing a backup of the database with the intention of restoring it on a different deployment. You can also back up the keystore separately and not necessarily as part of a restore operation.

Procedure

Note: If your deployment uses the restricted-v2 SCC, commands that require switching users or elevated privileges are not supported. Perform all steps as the Db2 instance user within the container. For more information, see Deploying Db2 or Db2 Warehouse with non-root deployment.

  1. Exec into the Db2 pod.
  2. Become the Db2 or Db2 Warehouse instance owner: 
    su - ${DB2INSTANCE}
  3. Find the KEYSTORE_LOCATION database manager configuration parameter: 
    db2 get dbm cfg | grep KEYSTORE_LOCATION

    The command returns a value that is similar to the following example:

    Keystore location   (KEYSTORE_LOCATION) = /mnt/blumeta0/db2/keystore/keystore.p12