dspmqspl (display security policy)
Use the dspmqspl command to display a list of all policies and details of a named policy.
Before you begin
- The queue manager on which you want to operate must be running.
- You must grant the necessary +connect, +inq and +chg authorities, using the setmqaut command, to connect to the queue manager and create a security policy.
For more information about configuring security see Setting up security.
Syntax
Command flag | Explanation |
---|---|
-m | Queue manager name (mandatory). |
-p | Policy name. |
-export The output is written to a DD named EXPORT | Adding this flag generates output which can easily be applied to a different queue manager. |
Examples
The dspmqspl command shows the key reuse count for all policies. The following
example is the output you receive on Multiplatforms:
Policy Details:
Policy name: PROT
Quality of protection: PRIVACY
Signature algorithm: SHA256
Encryption algorithm: AES256
Signer DNs: -
Recipient DNs:
CN=Name, O=Organization, C=Country
Toleration: 0
Key Reuse Count: 0
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Policy Details:
Policy name: PROT2
Quality of protection: CONFIDENTIALITY
Signature algorithm: NONE
Encryption algorithm: AES256
Signer DNs: -
Recipient DNs:
CN=Name, O=Organization, C=Country
Toleration: 0
Key Reuse Count: 100
On z/OS®, you can use the dspmqspl command with the CSQ0UTIL utility. For more information, see The message security policy utility (CSQ0UTIL).