PH69299: A Z/OS QUEUE MANAGER USING THE X25519 CURVE CANNOT CONNECT TO A V9.4.4 LEVEL DISTRIBUTED QUEUE MANAGER RUNNING WITH FIPS MODE EN

APAR status

• Closed as program error.

Error description

• A z/OS Queue Manager using the x25519 curve cannot connect to a
  V9.4.4 level Distributed Queue Manager running with FIPS mode
  enabled
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM MQ for z/OS Version 9       *
  *                 Release 3 Modification 0 and Release 4       *
  *                 Modification 0.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: By default an IBM MQ z/OS Queue Manager *
  *                      is unable to establish a TLS 1.3        *
  *                      connection with FIPS enabled and the    *
  *                      x25519 curve to an IBM MQ Distributed   *
  *                      Queue Manager running at level V9.4.4   *
  *                      or above.                               *
  ****************************************************************
  Currently a service parameter must be provided by IBM and
  configured by the user to allow the connection to work by
  allowing z/OS Queue Managers to start TLS channels with
  additional proposed key share groups when turned on.
  

Problem conclusion

• The service parameters default value has been set on to allow
  this connection configuration to work using default MQ settings.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PH71992 UO08492 UO08493

Modules/Macros

• CSQIRECP CSQMSTRT
  

Fix information

• Fixed component name

  IBM MQ Z/OS V9

• Fixed component ID

  5655MQ900

Applicable component levels