SSLClientLabel CLI/ODBC configuration keyword

Specifies a unique Secure Socket Layer (SSL) label that is mapped to a specific certificate to use with the CERTIFICATE authentication.

db2cli.ini keyword syntax:

SSLClientLabel = label

Default setting:

None.

Usage notes:

The SSLClientLabel keyword is available for use only with the CERTIFICATE authentication. The SSLClientLabel keyword identifies a certificate within the keystore database file. The SSLClientLabel keyword can be set in the data source section ([data source]) of the db2cli.ini file, or in a connection string.

You can omit setting the SSLClientLabel keyword for the CERTIFICATE authentication if both of the following conditions exist:

Only one personal certificate exists in the Keystore or the Microsoft Certificate Store (MSCS).
Only one key entry exists in the Keystore or the Microsoft Certificate Store (MSCS).

If the Keystore or MSCS has more than one personal certificate or more than one key entry, and the SSLClientLabel keyword is not set for certificate authentication, the CLI driver returns an SQL30081N error.