Details

DB2 supports a number of authentication mechanisms. It is recommended that the DATA_ENCRYPT authentication mechanism be used.

Solution

Suggested value is DATA_ENCRYPT so that authentication occurs at the server.
1. Attach to the DB2 instance
db2 => attach to $DB2INSTANCE
2. Run the following command from the DB2 command window-
db2 => update database manager configuration using authentication data_encrypt

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/162

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Unix.

References

• 800-53|SC-8(1)

Source

• Tenable.com/audits