Validating the digital signature of the client package for Data Protection for DB2

Edit online

Data Protection for DB2 helps protect DB2 data by enabling secure backup and recovery operations.

You can maintain backup versions of your files that you can restore if the original files are damaged or lost. You can also archive infrequently used files, preserve them in their current state, and retrieve them when necessary.

Client package signature verification

  1. Download the client package and extract the package bundle into the current directory.
  2. Use the signature file and the public key to verify the integrity of the downloaded package.
    • Run the following command: 
      openssl dgst -verify <public_key>.pem.pub.key -keyform PEM -sha256 -signature <package_name>.sig -binary <package_name>
    For example:

    Windows

    openssl dgst -verify sperppublic.pem.pub.key -keyform PEM -sha256 -signature 8.2.1.0-TIV-TSMERPDB2-Windowsx86_64.exe.sig -binary 8.2.1.0-TIV-TSMERPDB2-Windowsx86_64.exe

    AIX

    openssl dgst -verify sperppublic.pem.pub.key -keyform PEM -sha256 -signature 8.2.1.0-TIV-TSMERPDB2-AIX.bin.sig -binary 8.2.1.0-TIV-TSMERPDB2-AIX.bin

    Linux

    openssl dgst -verify sperppublic.pem.pub.key -keyform PEM -sha256 -signature 8.2.1.0-TIV-TSMERPDB2-Linuxx86_64.bin.sig -binary 8.2.1.0-TIV-TSMERPDB2-Linuxx86_64.bin

    The system displays Verified OK if the package verification succeeds; otherwise, it displays Verification Failure.