DB2 FOR LUW / DB2FORLUW / 970 - DB2

OS Authentication for DB2 can be very slow in AIX or pSeries 
Linux on certain pSeries hardware with POWER7 CPUs. 
The function cryptContextRealInit which makes ICC (IBM 
Cryptographic library for C) API calls. 
 
The problem exists on the following environments: 
 
  - Certain models of pSeries POWER7 CPUs (AIX and Linux) 
  or 
  - Virtualized environments (LPARs) (not restricted to any 
specific CPU) 
 
TRNG(true random number generators) code is always timing 
sensitive, the changes like new hardware, new compilers, and the 
changes to the underlying OS have all impacts. 
Faster hardware has also put more pressure on the available 
entropy. 
 
This problem exists in all current versions of DB2.

**************************************************************** 
* USERS AFFECTED:                                              * 
* All                                                          * 
**************************************************************** 
* PROBLEM DESCRIPTION:                                         * 
* See Error Description                                        * 
**************************************************************** 
* RECOMMENDATION:                                              * 
* Upgrade to Version 9.7 FixPack 9                             * 
****************************************************************

For AIX on PowerPC, see the technote: 
"DB2 Performance Issue Related to Cryptography on Power Series 
Hardware" 
http://www.ibm.com/support/docview.wss?uid=swg21614548 
 
Even trying the instructions in the technote, but the problem 
persists, please contact DB2 Technical Support to get a special 
build with ICC_TRNG=ALT2 support (in GSKit v8.0.14.27.) 
Note that ICC_TRNG=ALT2 is still only available in non-FIPS 
mode. 
 
Otherwise, there is no local fix.

DB2 Version 9.7 Fix Pack 9 for Linux, UNIX, and Windows
 DB2 Version 9.7 Fix Pack 9a for Linux, UNIX, and Windows
 DB2 Version 9.7 Fix Pack 10 for Linux, UNIX, and Windows
 

Problem was first fixed in DB2 UDB Version 9.7 FixPack 9

keiner bekannt / siehe Local-Fix

Vorgänger  : APAR is sysrouted TO one or more of the following: IC97833 IC97842 
Nachfolger : 

Datum - Problem gemeldet    :
Datum - Problem geschlossen :
Datum - der letzten Änderung:

16.04.2013
17.12.2013
17.12.2013

9.7.FP9