Purpose

Determines whether data is encrypted and decrypted when transmitted over the network between the driver and database server.

Valid Values

noEncryption | DBEncryption | requestDBEncryption | SSL

Behavior

If set to noEncryption, data is not encrypted or decrypted.

If set to DBEncryption, data is encrypted using DES encryption if the database server supports it. If the database server does not support DES encryption, the connection fails and the driver throws an exception. The AuthenticationMethod property must be set to a value of clearText, encryptedPassword, or encryptedUIDPassword. This value is not supported for DB2 for i.

If set to requestDBEncryption, data is encrypted using DES encryption if the database server supports it. If the database server does not support DES encryption, the driver attempts to establish an unencrypted connection. The AuthenticationMethod property must be set to a value of clearText, encryptedPassword, or encryptedUIDPassword. This value is not supported for DB2 for i.

If set to SSL, data is encrypted using SSL. If the database server does not support SSL, the connection fails and the driver throws an exception.

Notes

  • Connection hangs can occur when the driver is configured for SSL and the database server does not support SSL. You may want to set a login timeout using the LoginTimeout property to avoid problems when connecting to a server that does not support SSL.
  • When SSL is enabled, the following properties also apply:

    CryptoProtocolVersion

    HostNameInCertificate

    KeyStore (for SSL client authentication)

    KeyStorePassword (for SSL client authentication)

    KeyPassword (for SSL client authentication)

    TrustStore

    TrustStorePassword

    ValidateServerCertificate

Default

noEncryption

Data Type

String

See also

Configuring SSL Encryption

Performance Considerations