IDUG NA 2026

As Transport Layer Security (TLS) becomes mandatory across enterprise environments, Db2 professionals increasingly play a pivotal role in protecting data in transit—both on the client and server sides. While this session briefly reviews core TLS fundamentals such as trust models and server authentication, its primary focus is on mutual (client) certificate authentication for Db2 for z/OS. Attendees will be guided through the complete configuration workflow, including certificate management, RACF keyring setup, AT TLS policies, DDF configuration, and identity mapping for client certificates.

Db2 Z and the CIA is a powerful informational combination. To be clear, the CIA is the Compliance Information Analysis product available for free to many users of Db2 Z (if you have Broadcom products). Broadcom introduced the CIA as a subproduct of ACF2. It is now an independent product available to most users of their products. The CIA provides a series of Db2 tables that can contain all the information from your external-security-manager (ESM), whether it is ACF2, RACF, or TopSecret. Once your ESM is loaded into the CIA, it is relatively more accessible to the curious end-user! SQL SELECT can be used to easily build interesting and useful and focused reports about your security configuration. This presentation will go over the basics of mainframe security and the basics of the CIA and how to build and populate. Finally, interesting CIA tables and views (and sample SELECTs) will be highlighted to show why it is useful.