Verifying image signatures

From March 2023, IBM® MQ Operator and IBM MQ queue manager container images are digitally signed.

First IBM MQ Operators to be signed:

2.3.1 (CD)
2.0.9 (LTS)

First IBM MQ queue manager container images to be signed:

9.3.2.0-r2 (CD)
9.3.0.4-r2 (LTS)

About this task

Digital signatures provide a way for consumers of content to ensure that what they download is both authentic (it originated from the expected source) and has integrity (it is what we expect it to be).

Procedure

Verify the signatures of IBM MQ Operator and IBM MQ queue manager container images:

For an IBM MQ Operator at 3.0.0 or later, or an IBM MQ queue manager container image at 9.3.4.0-r1 or later, see Verifying image signatures in the IBM Cloud Pak® for Integration (CP4I) 2023.4 documentation.
For an IBM MQ Operator at 2.4.x, or an IBM MQ queue manager container image at 9.3.3.x, see Verifying image signatures in the CP4I 2023.2 documentation.
For an IBM MQ Operator prior to 2.4.0, or an IBM MQ queue manager container image prior to 9.3.3.0-r1, see Verifying image signatures in the CP4I 2022.4 documentation.