SSLClientLabel IBM data server driver configuration keyword

Specifies a unique Secure Socket Layer (SSL) label that is mapped to a specific certificate to use with the CERTIFICATE authentication.

Equivalent CLI keyword
SSLClientLabel
Equivalent IBM® data server provider for .NET connection string keyword
SSLClientLabel
IBM data server driver configuration file (db2dsdriver.cfg) syntax
<parameter name="SSLClientLabel" value="label"/>
Default setting:
None
Usage notes:

  • The SSLClientLabel keyword is only available for use with the CERTIFICATE authentication. The SSLClientLabel keyword identifies a certificate within the keystore database file.

  • You can omit setting the SSLClientLabel keyword in the IBM data server driver configuration file for the CERTIFICATE authentication if both of the following conditions exist:
    • Only one personal certificate exists in the Keystore or the Microsoft Certificate Store (MSCS).
    • Only one key entry exists in the Keystore or the Microsoft Certificate Store (MSCS).
    If the Keystore or MSCS has more than one personal certificate or more than one key entry, and the SSLClientLabel keyword is not set for CERTIFICATE authentication, then the CLI driver returns an SQL30081N error.
  • You can set the scope of the SSLClientLabel keyword with the placement of the SSLClientLabel keyword in the IBM data server driver configuration file:
    • For a global effect, you can set the SSLClientLabel keyword in the <parameters> section of the IBM data server driver configuration file.
    • For an effect on a specific database, you can set the SSLClientLabel keyword in the <database> section of the IBM data server driver configuration file.
    • For an effect on specific data source name (DSN), you can set the SSLClientLabel keyword in the <dsn> section of the IBM data server driver configuration file.