Enhance the security of your storage environment
IBM Spectrum Protect™ Version 8.1.3 provides security enhancements.
Servers, clients, and storage agents that use IBM
Spectrum Protect V8.1.3 or later software or Tivoli® Storage Manager V7.1.8 or later software are automatically
configured to communicate with each other by using the Transport Layer Security (TLS) 1.2 protocol.
Certificates are distributed automatically.
Restrictions:
- In V8.1.2, storage agents had to be manually configured to use SSL. Beginning in V8.1.3, storage agents are automatically configured to use SSL. Library clients and library manager servers automatically use SSL to communicate with storage agents that use V7.1.8 or later software or V8.1.2 or later software, but you must manually configure the certificates between them. A storage agent automatically exchanges certificates with its database server.
- After an administrator successfully authenticates by using IBM Spectrum Protect V8.1.2 or later software or Tivoli Storage Manager V7.1.8 or later software, the administrator can no longer authenticate on clients or servers that are using earlier versions. This restriction also applies when you use functions such as command routing or server-to-server export, when the administrator authenticates to the IBM Spectrum Protect server as an administrator from another server.
For the latest information about V8.1.3 security updates, see technote 2004844.