WebSphere MQ Extended Security Edition

IBM offers WebSphere MQ Extended Security Edition to address environments where application-level data protection is a critical need. It includes 100% of the function offered in WebSphere MQ V6 plus the extended security services of IBM Tivoli® Access Manager for Business Integration (TAMBI) V5.1.1.

WebSphere MQ Extended Security Edition also features:

• Flexibility to add application-level data protection and remote security policy administration, which includes:

  
  - Sign each message with a unique private key associated with the sending application.
  - Encrypt individual messages under unique keys, helping to remove the threat of compromising the encryption key through repetitive use.

• Yields a true end-to-end security model by removing the need for you to reengineer and modify your applications to secure message data from within each application.

• WebSphere MQ Extended Security also enables remote administration of security policies on queue managers and on individual queues. These include:

  
  - Put and get access control permissions, including time of day and day of week restriction.
  - Data protection options (none, integrity, and privacy).
  - Audit options that allow generation of a specific security audit record for each open, put, get, and close operation showing the security policy in place and whether it was successfully enforced. This can be critical in demonstrating compliance with legislation like the United States Health Insurance Portability and Accountability Act (HIPAA) or similar mandates in other countries.

  
  Remote administration is performed via a Web-based utility with an easy-to-use GUI for setting, viewing, and updating security policies. A delegation capability allows IT organizations to maintain control over the enterprise security infrastructure for WebSphere MQ Extended Security Edition and still grant a specific department or line-of-business the ability to manage its subset of resources. Administration can also be done via scripting using a command line interface.

• WebSphere Extended Security Edition also includes the ability to:

  
  - Protect message data while the message is in queue and as it flows across the network
  - Attach digital signatures to individual messages so you can verify if they have been tampered with and identify and trace messages to their point of origin
  - Encrypt messages to shield them from disclosure to unauthorized parties and centrally define and enforce security policies via a Web-based interface
  - Provide security-specific, fine-grained auditing records to document adherence to security policy, protecting highly sensitive transactions records
  - Help accelerate new application deployment by reducing development time and costs by providing application-level security without requiring complex security coding
  - Provide an immediate ROI upon deployment by securing existing applications without application change
  - Support other WebSphere MQ family members, such as WebSphere Message Broker and WebSphere MQ Workflow
  - Additional features and benefits are available at the WebSphere MQ and Tivoli Access Manager for Business Integration Web sites

• Upgrade information:

  
  - Existing WebSphere MQ customers can upgrade to WebSphere MQ Extended Security Edition by purchasing a trade-up part number shown in the announcement letter.