dspmqspl (display security policy)

Use the dspmqspl command to display a list of all policies and details of a named policy.

Before you begin

  • The queue manager on which you want to operate must be running.
  • You must grant the necessary +connect, +inq and +chg authorities, using the setmqaut command, to connect to the queue manager and create a security policy.

For more information about configuring security see Setting up security.

Syntax

Read syntax diagramSkip visual syntax diagram dspmqspl -m QMgrName -pPolicyName-export
Table 1. dspmqspl command flags
Command flag Explanation
-m Queue manager name (mandatory).
-p Policy name.
-export The output is written to a DD named EXPORT Adding this flag generates output which can easily be applied to a different queue manager.
[V9.0.0.0 Jun 2016]

Examples

The dspmqspl command shows the key reuse count for all policies. The following example is the output you receive on Multiplatforms:

Policy Details:
Policy name: PROT
Quality of protection: PRIVACY
Signature algorithm: SHA256
Encryption algorithm: AES256
Signer DNs: -
Recipient DNs:
  CN=Name, O=Organization, C=Country
Toleration: 0
Key Reuse Count: 0
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Policy Details:
Policy name: PROT2
Quality of protection: CONFIDENTIALITY
Signature algorithm: NONE
Encryption algorithm: AES256
Signer DNs: -
Recipient DNs:
  CN=Name, O=Organization, C=Country
Toleration: 0
Key Reuse Count: 100

[z/OS]On z/OS®, you can use the dspmqspl command with the CSQ0UTIL utility. For more information, see The message security policy utility (CSQ0UTIL).