dspmqspl (display security policy)
Use the dspmqspl command to display a list of all policies and details of a named policy.
Before you begin
- The queue manager on which you want to operate must be running.
- You must grant the necessary +connect, +inq and +chg authorities, using the setmqaut command, to connect to the queue manager and create a security policy.
For more information about configuring security see Setting up security.
Syntax
Command flag | Explanation |
---|---|
-m | Queue manager name (mandatory). |
-p | Policy name. |
-export The output is written to a DD named EXPORT | Adding this flag generates output which can easily be applied to a different queue manager. |
![[V9.0.0.0 Jun 2016]](ng900.gif)
Examples
The dspmqspl command shows the key reuse count for all policies. The following
example is the output you receive on Multiplatforms:
Policy Details:
Policy name: PROT
Quality of protection: PRIVACY
Signature algorithm: SHA256
Encryption algorithm: AES256
Signer DNs: -
Recipient DNs:
CN=Name, O=Organization, C=Country
Toleration: 0
Key Reuse Count: 0
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Policy Details:
Policy name: PROT2
Quality of protection: CONFIDENTIALITY
Signature algorithm: NONE
Encryption algorithm: AES256
Signer DNs: -
Recipient DNs:
CN=Name, O=Organization, C=Country
Toleration: 0
Key Reuse Count: 100
On z/OS®, you can use the
dspmqspl command with the CSQ0UTIL utility. For more information, see The message security policy utility
(CSQ0UTIL).