IDUG NA 2025

This half–day hands–on workshop is designed to provide you with all the details you need to know for a successful SSL/TLS deployment for Db2 LUW and on–going certificate maintenance.  Encrypting network communications is essential in today’s security conscious world and is a complex task with many moving parts.  That complexity is confirmed by the number of cases Db2 support and development see asking for help configuring TLS.  This workshop builds on those years of experience to give you the knowledge you need to set things up correctly and securely.  The workshop will start with the very basics of asymmetric cryptography, which form the foundation of certificates and turn the discussion to trust and the role it plays.  From there, we will turn to hands on exercises configuring the Db2 server, followed by Db2 clients/drivers allowing encrypted client/server communication.  Topics such as certificate creation, keystore management, and hostname validation will be discussed and practiced.  The steps required for certificate renewal will be demonstrated.  Advanced topics such as TLS with HADR will be discussed, showing how the practiced knowledge of setting up client/server TLS will follow through to HADR.  While not necessary to attend the workshop and learn something, the hands on–portions will require you to bring your own laptop and be able to establish an SSH connection to the public IBM Cloud.