You can create or modify TCP/IP client connections that use SSL, by creating or modifying a configurable service. You can specify the type of protocol, and the allowed cipher suites. By default, SSL is not enabled for any configurable services. The nodes use the standard broker keystore and truststore configuration.
Follow these steps to configure the TCPIP nodes to use SSL:
Use the mqsichangeproperties command to change an existing TCPIPClient configurable service.
Use the mqsicreateconfigurableservice command to create a TCPIPClient configurable service.