IDUG NA 2025

This half–day hands–on workshop is designed to provide you with all the details you need to know for a successful SSL/TLS deployment for Db2 LUW and on–going certificate maintenance.  Encrypting network communications is essential in today’s security conscious world and is a complex task with many moving parts.  That complexity is confirmed by the number of cases Db2 support and development see asking for help configuring TLS.  This workshop builds on those years of experience to give you the knowledge you need to set things up correctly and securely.  The workshop will start with the very basics of asymmetric cryptography, which form the foundation of certificates and turn the discussion to trust and the role it plays.  From there, we will turn to hands on exercises configuring the Db2 server, followed by Db2 clients/drivers allowing encrypted client/server communication.  Topics such as certificate creation, keystore management, and hostname validation will be discussed and practiced.  The steps required for certificate renewal will be demonstrated.  Advanced topics such as TLS with HADR will be discussed, showing how the practiced knowledge of setting up client/server TLS will follow through to HADR.  While not necessary to attend the workshop and learn something, the hands on–portions will require you to bring your own laptop and be able to establish an SSH connection to the public IBM Cloud.

A cloud native resource without monitoring (or with a very complex monitoring setup) is like driving a car without a dashboard – you wouldn't know if you are speeding or low on fuel! Db2 needs a concise and simplified monitoring solution that gives a bird eye's view on the performance metrics and Db2 diagnostics. We present here a solution that is available in AWS, Azure, Google Cloud and IBM Cloud while running Db2 with a Infrastructure as a Service model.
The speaker will cover her experience of collaboration with all cloud vendors, Db2 development and customers like SAP. The session will share the findings from that reserach and development project and it is based on the cloud native monitoing solutions currently available. The solution consists of a smart combination of Db2 monitoring capabilities, Operating System scheduling and Cloud logging functionality resulting in an out–of–the–box Db2 monitoing solution.
The solution has the following features:

Displays the most important metrics (based on customer data) of a database instance namely, Bufferpool quality, Activities per second, Activity wait time and Logging performance.
Information regarding Db2 Diagnostics by providing the count of increasing errors that can be easily extended for a comprehensive diagnostic analysis. 
Whether or not the database is alive.

This solution introduces the Monitoring as a Service infrastructure and ables you to build your own cloud native monitoring solution with a few fingertips.