Security

You must consider security requirements before and after you configure the IBM® MQ Appliance.

Types of user and how they are authenticated
There are two types of user on the IBM MQ Appliance: appliance users, and messaging users. Appliance users are users that can administer the appliance and IBM MQ resources. Messaging users are users that can perform operations on messaging resources.
User authorization, credential mapping, and access profiles
The credential mapping part of role based management authorizes appliance users to use different features on the IBM MQ Appliance.
Role based management
Appliance users and their permissions are controlled by role based management.
Routine user administration
Various routine administration tasks can be completed for local users, either by using the appliance command line or the IBM MQ Appliance web UI.
File system encryption
You can encrypt queue manager file systems, you can also encrypt the system file systems that are used by IBM MQ.
TLS certificate management
The IBM MQ Appliance supports the Transport Layer Security (TLS) protocol to provide link level security for message channels and MQI channels.
TLS connections
You can configure TLS clients and TLS servers on the IBM MQ Appliance.
FIPS compliance
Gives a guide to FIPS 140-2 and FIPS 140-3 level 1 compliance on the IBM MQ Appliance.
Audit trail
The appliance keeps an audit trail in the audit log and the CLI log.