Keywords: Encrypted User ID and password, using with Network Server, IBM Java Cryptography Extension (JCE), ibmjcefw.jar, ibmjceprovider.jar, ibmpkderby.jar, ibmpkcs11.jar

# Enabling the encrypted user ID and password security mechanism

To use the encrypted user ID and password security mechanism, you need a Java environment whith an JCE (Java Cryptography Extension) which supports the Diffie-Hellman algorithm with a public prime of 256 bits. Sun's Java™ 2 Platform, Standard Edition, Version 1.4 (J2SE) and later requires a public prime of 512 bits or more. An alternative mechanism if the 256 bit public prime is not supported, is STRONG_PASSWORD_SUBSTITUTE_SECURITY.

To use the encrypted user id and password security mechanism during JDBC connection using the network client, specify the `securityMechanism` in the connection property.
Note: If an encrypted database is booted in the Network Server, users can connect to the database without giving the `bootPassword`. The first connection to the database must provide the `bootPassword`, but all subsequent connections do not need to supply it. To remove access from the encrypted database, use the `shutdown=true` option to shut down the database.
Parent topic: User authentication differences
Related concepts
Security mechanism options when user authentication is enabled on the Network Server
Security mechanism options when user authentication is disabled on the Network Server