Db2

 View Only
  • 1.  GSKit for Windows

    IBM Champion
    Posted 4 days ago

    Hi All!

    Where I can find GSKIT for Windows 64-bit?



    ------------------------------
    Jan Nelken
    ------------------------------


  • 2.  RE: GSKit for Windows

    Posted 4 days ago

    Download it from IBM fix central, via link below

    https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=Security+Systems&product=ibm/Tivoli/IBM+Global+Security+Kit&release=All&platform=All&function=fixId&fixids=8.0.*&source=fc



    ------------------------------
    Mike O'Reilly
    ------------------------------



  • 3.  RE: GSKit for Windows

    IBM Champion
    Posted 4 days ago

    Thanks; FixCen does not allow me to d/l this unfortunately:



    ------------------------------
    Jan Nelken
    ------------------------------



  • 4.  RE: GSKit for Windows

    Posted 4 days ago

    Contact your IBM software coordinator , if you have one.

    The GSKit comes with several IBM products, in various forms. Your organization may have a relevant support contract for other products that include GSK , which someone in your organization can then obtain from fix central.

    Maybe clarify why you need this standalone,  because Gskit (or relevant subsets of it ) are shipped with Db2-LUW server products, and its libraries are shipped with Db2 data-server-clients.



    ------------------------------
    Mike O'Reilly
    ------------------------------



  • 5.  RE: GSKit for Windows

    IBM Champion
    Posted 4 days ago

    Exactly: with Db2 LUW there is a minimal subset shipped with Db2 code; I want to effectively learn both Db2 Native encryption and SSL setup (both features require GSKIT). Basically there is gsk8capicmd executable included.
    Does standalone version include more documentation, diagnostic tools and examples?



    ------------------------------
    Jan Nelken
    ------------------------------



  • 6.  RE: GSKit for Windows

    Posted 3 days ago

    The GSK8 documentation does not come with the GSK8 fixes. 
    GSK8 delivers the crypto algorithm implementations, plus some tooling, but those crypto algorithms are standards documented separately, and all required tooling for Db2-LUW server is already shipped with Db2-server.

    The GSK8 documentation is present in the Db2-knowledge-center and also as a separate PDF. Typically all you need for Db2-LUW use-cases for GSK8 is already present in the Db2-Knowledge-center . So to understand how Db2-LUW is enabled for TLS/SSL and the operational aspects of the same, you don't need GSK8 docs. Similarly for Db2-LUW native encryption, the GSK8 docs will not reference it.

    The separately available pdf is titled "GSKCapiCmd User's Guide", and you want the GSK8 version (not from earlier releases). The PDF has details for other use-cases for GSK8 plus background info and some examples. 

    IBM seems slow to update that PDF, but there is a line "This edition to GSKCapiCMd version 8.xx.yy" near the start of the document.  At the present date, it appears that the GSK8 latest fixes are 8.0.55.31 level (from 2023) although the PDF mentions 8.00.14 (2011).

    https://www.ibm.com/docs/en/SSAL2T_8.2.0/com.ibm.cics.tx.doc/pdf/GSK_CapiCmd_UserGuide.pdf  

    (More recent updates might exist, but I've not found them).

    Sometimes fixes/changes to GSK8 come automatically with Db2 fixpacks, that is to say it is not necessary to separately maintain GSK8 that is included with Db2-server, unless there are special cases such as when a single hostname has more than one IBM product and each uses a GSK8 version with slightly different use cases.



    ------------------------------
    Mike O'Reilly
    ------------------------------



  • 7.  RE: GSKit for Windows

    Posted 3 days ago

    There's a newer version here:
    https://public.dhe.ibm.com/software/webserver/appserv/library/v80/GSK_CapiCmd_UserGuide.pdf

    File is dated 2022-03-29 08:18  1.3M 

    PDF is titled:  "GSKCapiCmd Users Guide Edition 23 March 2018"

    and says:
    "This edition applies to GSKCapiCmd version 8.0.50 and to all subsequent
    releases and modifications until otherwise indicated in new editions."

    I realize this was found under WAS (Websphere Application Server), but
    as Mike noted, GSKit is used in several products.  DB2, Informix, and WAS
    all use it.

    A newer version might exist but this was the latest I found in an online
    search.

    scot




  • 8.  RE: GSKit for Windows

    IBM Champion
    Posted 3 days ago
    Edited by Jan Nelken 3 days ago

    Thanks Mike and Scot!

    When I was pretty and young (I am only pretty now) - similarly with TSA - I did not rely on TSA components and/or documentation bundled with Db2; instead I was reading TSA documentation and hints from TSA related sources from Boeblingen ....

    Old habits don't die easily they slowly are fading away ...



    ------------------------------
    Jan Nelken
    ------------------------------