MQSSLFIPS

MQSSLFIPS specifies whether only FIPS-certified algorithms are to be used if cryptography is carried out in IBM® MQ. The values are the same as for the SSLFIPS parameter of the ALTER QMGR command.

The use of FIPS-certified algorithms is affected by the use of cryptographic hardware, see Specifying that only FIPS-certified CipherSpecs are used at run time on the MQI client.

To set this variable use one of these commands:
  • On Windows systems:
    
    SET MQSSLFIPS=YES|NO
    
  • On UNIX and Linux® systems:
    
    export MQSSLFIPS=YES|NO
    
  • [IBMi]On IBM i:
    
    ADDENVVAR ENVVAR(MQSSLFIPS) VALUE(YES|NO)
    
The default is NO.