Securing Communication Path between IdentityIQ and DB2 Server

The IBM DB2 connector supports connecting to the DB2 servers through TLS version 1.2.

To establish the connection, complete the following:

  1. Using the Java keytool command line, import the certificate file that contains the server root certificate into the Java keystore.
    Or
    Execute the following command from the /jre/lib/security directory:

    keytool -import -alias aliasName -keystore <cacerts file including the full location> -trustcacerts -file <absolute path of certificate obtained from DB2 Server>

    In the preceding command line, aliasName is the name of the alias.

  2. Restart the Web Server.

  3. Login to IdentityIQ and enter the application URL in the following format for connecting to the DB2 Server with TLS version 1.2:

    jdbc:db2://<host>:<port on which TLS is configured>/<Database>:sslConnection=true;sslTrustStoreLocation=<location of certificates cacerts>;sslTrustStorePassword=<ssl trust store password>;