Configuring TIBCO ActiveMatrix BusinessWorks™ 5 to connect to IBM DB2 database server over TLS

This article explains how to configure JDBC Connection shared resource in TIBCO ActiveMatrix BusinessWorks™ 5 to connect to IBM DB2 database server over TLS.

IBM Data Server Driver for JDBC and SQLJ - db2jcc4.jar

JDBC Driver

Select the following driver from the Select driver dropdown. 

com.ibm.db2.jcc.DB2Driver

Database URL

To enable TLS with server certificate validation, specify the URL as follows -

jdbc:db2://host:port/database:sslConnection=true;sslTrustStoreLocation=path_to_truststore_file;sslTrustStorePassword=password;

For example, jdbc:db2://dbserver:25001/sample:sslConnection=true;sslTrustStoreLocation=D:/PKI/trust.jks;sslTrustStorePassword=password;

• sslConnection - Set this property to true to enable TLS
• sslTrustStoreLocation - Path to the truststore file containing trusted certificates 
• sslTrustStorePassword - Truststore password

TIBCO Database Driver Supplement Software (TDDS)  - TIdb2.jar

JDBC Driver

Select the following driver from the Select driver dropdown.

tibcosoftwareinc.jdbc.db2.DB2Driver

Database URL

To enable TLS with server certificate validation, specify the URL as follows -

jdbc:tibcosoftwareinc:db2://host:port;databaseName=database;EncryptionMethod=SSL;ValidateServerCertificate=true;TrustStore=path_to_truststore_file;TrustStorePassword=password

For example, jdbc:tibcosoftwareinc:db2://dbserver:25001;databaseName=sample;EncryptionMethod=SSL;ValidateServerCertificate=true;TrustStore=D:/PKI/trust.jks;TrustStorePassword=password

• EncryptionMethod - Set this property to SSL to enable TLS
• ValidateServerCertificate -  Set this property to true to validate the server certificate
• TrustStore - Path to the truststore file containing trusted certificates
• TrustStorePassword -Truststore password

Using system properties to specify the truststore file

The system property javax.net.ssl.trustStore may be used to specify the truststore file. When using the system property, specify the URL as follows -

IBM Data Server Driver for JDBC and SQLJ

jdbc:db2://host:port/database:sslConnection=true;

TDDS driver

jdbc:tibcosoftwareinc:db2://host:port;databaseName=database;EncryptionMethod=SSL;ValidateServerCertificate=true

Add the following properties to designer.tra/bwengine.tra

java.property.javax.net.ssl.trustStore=path_to_truststore_file
java.property.javax.net.ssl.trustStorePassword=truststore_password

For example,
java.property.javax.net.ssl.trustStore=D:/PKI/trust.jks
java.property.javax.net.ssl.trustStorePassword=password

References -

IBM DB2 database server - TLS configuration

https://www.ibm.com/docs/en/db2/11.5?topic=transit-tls-configuration-db2

IBM Data Server Driver for JDBC and SQLJ - TLS configuration and properties

https://www.ibm.com/docs/en/db2/11.5?topic=dsdjsss-configuring-connections-under-data-server-driver-jdbc-sqlj-use-ssl

TDDS driver - TLS configuration and properties

https://docs.progress.com/bundle/datadirect-connect-jdbc-51/page/Data-Encryption_5.html