Configuring TLS for a Db2 instance

To secure the connection between the i2® Analyze application server and the database instance, you must change the configuration of both. The Db2® server stores its associated certificates in a key database, so you must create and populate a key database for the Db2 server to use.

Before you begin

Ensure that you configured Liberty for TLS. For more information, see Configuring Liberty for TLS.

About this task

In i2 Analyze, TLS connections that involve the Db2 server require a key database that contains a signed certificate. In a production deployment, after you create the key database, you must populate it with a certificate that is signed by a trusted certificate authority.

Steps

  1. Follow the steps that are provided in the Db2 documentation to configure TLS for your Db2 instance. For more information, see Configuring Secure Sockets Layer (TLS) support in a Db2 instance.

Note: If you are using a remote Db2 database, then you must configure the Db2 client on the Liberty server to communicate by using TLS.