Secure DataBase Connection with TLS1.2
search cancel

Secure DataBase Connection with TLS1.2


Article ID: 184015


Updated On:


CA Identity Manager CA Identity Governance CA Identity Portal CA Identity Suite


We are in the process of upgrading our existing CA Identity Manager from 12.6.8 to 14.3 with OVA.  We heard that 14.3 doesn't not support secure database connection (ODBC) with TLS1.2.  Therefore, we would like you to confirm if this is the case.  If not, which kind of secure connection does this version of Identity Manager support?



Release : 14.3



1)      FIPS support is available for new installations of the vApp on VMWare and Azure

2)      The FIPS support is to store application based password in AES256 format

3)      If the FIPS mode is enabled, so yes, the DB credentials will be stored in the standalone.xml in AES256 format

4)      At the moment, customers can’t change the basic URL for the connector. We have a feature in the backlog which we will ship very soon.

While I cannot provide a way to secure the connection to the database, I can provide a way to get user attribute data encrypted before it is written.

   Also, as we spoke about, if this does not work for the team you will need to log into communities and open an idea for this.

   After that idea is created, you can reach out to Itamar on communities as he is the product owner.