Configuring TLS security for IBM MQ

To configure TLS security, you set up TLS on each queue manager and each client that uses TLS-enabled connections.

About this task

For an introduction, and details on how certificates are used to establish TLS connections, see Using SSL security with IBM® MQ.

Setting up TLS on a queue manager

To set up TLS on a queue manager, for each queue manager that uses TLS-enabled connections:

Procedure

  1. Manage the digital certificates that are used by the queue manager. For more information, see Managing SSL certificates.
  2. Configure the queue manager for TLS-enabled messaging. For more information, see Configuring SSL on queue managers.
  3. Configure channels to support secure messaging using TLS. For more information, see Configuring SSL channels.

Results

Setting up TLS on an IBM MQ MQI client

To set up TLS on an IBM MQ client, for each client that uses TLS-enabled connections:

  1. Manage the digital certificates that are used by the client. For more information, see Managing SSL certificates.
  2. Configure the client for TLS-enabled messaging. For more information, see Configuring SSL on IBM MQ clients.
  3. Configure the client channel definition to support secure messaging using TLS. For more information, see Configuring SSL on IBM MQ clients.

For more information, see Securing.