Verifying IBM Global Security Kit (GSKit) installation and configuration

For the encryption of Db2® data, both at rest and in transit, the IBM® Global Security Kit (GSKit) must be correctly installed and configured.

Procedure

  1. Verify that IBM Global Security Kit (GSKit) is installed:
    Linux and UNIX operating systems
    • On Linux and UNIX operating systems, the Db2 installer installs GSKit locally. For each instance, the IBM Global Security Kit (GSKit) libraries will be located in sqllib/lib32/gskit or sqllib/lib64/gskit.
    • If a global copy of IBM Global Security Kit (GSKit) exists (for example, in /usr/lib on Linux or UNIX) keep the global copy of IBM Global Security Kit (GSKit) and the copies of IBM Global Security Kit (GSKit) installed by the Db2 installer at the same version level.
    Windows operating systems
    You must install IBM Global Security Kit (GSKit) manually. See: IBM Global Security Kit (GSKit) installation instructions for Windows
  2. Verify that the path to the IBM Global Security Kit (GSKit) libraries is set in the appropriate environment variable for your operating system:
    Table 1. Environment variable settings for IBM Global Security Kit (GSKit) libraries on Linux, UNIX, and Windows operating systems
    Operating system Location of IBM Global Security Kit (GSKit) libraries Environment variable setting
    Linux® and UNIX 32-bit $INSTHOME/sqllib/lib32/gskit Include $INSTHOME/sqllib/lib32/gskit in the LD_LIBRARY_PATH, LIBPATH, or SHLIB_PATH environment variable.
    Linux and UNIX 64-bit $INSTHOME/sqllib/lib64/gskit Include $INSTHOME/sqllib/lib64/gskit in the LD_LIBRARY_PATH, LIBPATH, or SHLIB_PATH environment variable.
    Windows 32-bit C:\Program Files (x86)\IBM\gsk8\lib Include C:\Program Files (x86)\IBM\gsk8\lib in the PATH environment variable.
    Windows 64-bit
    64-bit IBM Global Security Kit (GSKit) libraries:
    C:\Program Files\IBM\gsk8\lib64

    32-bit IBM Global Security Kit (GSKit) libraries:
    C:\Program Files (x86)\IBM\gsk8\lib
    		 Include C:\Program Files\IBM\gsk8\lib64 or C:\Program Files (x86)\IBM\gsk8\lib in the PATH environment variable.
    Note: On the client side of Db2, you can configure Db2 to load either the local or global version of IBM Global Security Kit (GSKit), through the ClientGSKitLocation parameter. This parameter is located in both the db2dsdriver.cfg configuration file and the db2cli.ini initialization file. For more information, see ClientGSKitLocation CLI/ODBC and IBM data server driver configuration keyword.