Keystore configuration

Once you have selected your keystore, you must implement it and configure Db2 to recognize the keystore.

For instructions on how to implement a local PKCS #12 keystore file, refer to Creating a local keystore.

To interact with a centralized keystore using KMIP or PKCS #11, you must also create a keystore configuration file to inform Db2® of the keystore behaviors and configuration. For information on how to create a configuration file for a centralized keystore:

For a keystore using KMIP, refer to Creating a KMIP configuration file.
For a keystore using PKCS #11, refer to Creating a PKCS #11 configuration file

Once you have implemented your keystore and, if required, created the appropriate configuration file, you can configure Db2 to recognize and interact with the keystore. This configuration is done by setting two database manager configuration parameters: keystore_type and keystore_location. For more information, see Configuring a Db2 instance to use a keystore.