IDUG NA 2026

This session is a deep dive into 3 new Db2 12.1 security features, Reduce file permissions, RCAC mask at read enhancements, and defining a Trusted Context using the new trust procedure and client callbacks. This will be a face paced session offering practical details on how to make use of these new features in more depth than a what's new session can cover. Reduced file permissions address the common concern of everyone having access to the db2diag.log (and others). Mask at read offers an alternative masking behaviour with fundamental changes to SQL behaviour. And Trust Procedures allow custom definitions of trust for determining a trusted connection.

Generating digital certificates while installing a product like DB2 and related products on z/OS frequently involves intricate hurdles, where minor errors lead to postponed rollouts, service interruptions, and heavy manual workloads. This session breaks down the core principles of certificates while offering actionable techniques and proven methods to refine your workflow. Furthermore, we will debut an innovative utility engineered to simplify the baseline certificate configuration during mainframe software deployment, minimizing technical friction and fast-tracking your path to production.

As enterprise security threats evolve, Multi-Factor Authentication (MFA) has become essential for safeguarding access to mission-critical systems like Db2 for z/OS. This session provides an inside look at a day in the life of a Db2 for z/OS administrator navigating an MFA-enabled environment. From securely logging in and managing authentication challenges to executing routine database tasks with enhanced security controls, we’ll examine how MFA impacts daily workflows, troubleshooting, and compliance requirements. Attendees will gain practical insights into best practices, potential challenges, and strategies for balancing security with productivity. Additionally, we’ll explore a range of access methods, from traditional TSO to modern tools like Db2 for z/OS Administration Foundation, SQL Tuning Services, and the Db2 for z/OS Developer Extension for VS Code.

Are you challenged with tasks having to provide audit reports detailing who has access to which objects and who has which privileges – even worse, who had access 3 months ago ?Many Db2 sites are using a log tool to accomplish these tasks – but are you aware of the relatively new capabilities in Db2 dealing with security information stored in the catalog ?We will dive into what Db2 has to offer natively and how you can handle regulatory requirements in an easier way augmenting your current processes.