Enabling Informix network encryption

Last Updated : Sep 18, 2024 |
Prolog information
Before you begin
Note the following for the customer-provided certificate:
  1. Log in to the CMS server with root privileges.
  2. Run the cmsadm command.
  3. Enter the number associated with the run_cms option.
  4. Enter 2 to turn off CMS but leave IDS running.
  5. Run the /cms/install/bin/ids_tls_configure -e command.
    ADDITIONAL INFORMATION:
    If Informix network encryption is already enabled, the output displays a message such as the following:
    Informix encryption(TLS/SSL) is already configured. Encryption enable can't 
    be
    executed. Exiting.
    ADDITIONAL INFORMATION:
    If Informix network encryption is not enabled, the output displays a message such as the following:
    Informix encryption(TLS/SSL) enable started.
    Provide the PKCS12 certificate for configuring TLS/SSL.
  6. Enter the path on the CMS server where you saved your certificate.
  7. Enter the password for the certificate keystore.
    ADDITIONAL INFORMATION:
    If a certificate validation error occurs, the error is reported and encryption is not enabled. The following are examples of error messages you might see if the validation fails:
    The provided certificate is not PKCS12 format. CERTIFICATE_TYPE
    Please make sure your certificate meets the requirements in the CMS ODBC/JDBC
    document, then re-execute ids_tls_configure
    The provided certificate does not include the required alias: cms_net_encrypt.
    Certificate alias: ALIAS. Please make sure your
    certificate meets the requirements in the CMS ODBC/JDBC document,
    then re-execute ids_tls_configure.
  8. Run the cmsadm command.
  9. Enter the number associated with the run_cms option.
  10. Enter 1 to turn on CMS.
Next steps
After Informix encryption is enabled, install the certificate on the computer where the ODBC and JDBC software is installed. For more information, see Installing the Informix encryption certificate on your Windows computer.