Encryption of mainframe communications and DB2 database for OM Web Viewer 12.1

Products

• Output Management Web Viewer

Issue/Introduction

Web Viewer's communication to the mainframe backend, if this is a database, should be encrypted. From the server to the database, the Security Technical Implementation Guide (STIG) requires DB payload encryption. This is normally accomplished by a DBA going to request an encryption certificate and put it on a database (Db2). If the Web Viewer server is talking to a database on IBM Mainframe, our expectation is the same encryption should occur.

Environment

• Output Management Web Viewer 12.1
• IBM Db2

Resolution

The SQL database was not on the mainframe.  CCI TLS 1.2 encryption is already in place, so all communications to the mainframe from the Web Viewer Server are already encrypted.