MQ SSL settings

How to configure IBM® WebSphere® MQ SSL settings.

About this task

To enable and configure SSL settings for the transport:

Procedure

  1. Click the SSL tab. The MQ SSL page of the MQ transport.
  2. To enable SSL, select the Use MQ SSL check box. The remaining configuration options, described, then become available.
    Field Description
    Peer Name The Distinguished Name (DN) of the queue manager to be used by SSL. The queue manager identifies itself using an SSL certificate, which contains a DN. IBM Rational® Integration Tester can use this DN to ensure that it is communicating with the correct queue manager.

    In MQ, a DN pattern is specified by using the sslPeerName variable of MQEnvironment. Connections succeed only if Peer Name matches the pattern that is specified.

    Cipher Suite Select one of the available cipher suites to use for encrypting the transport communications.
    Fips Required This option specifies whether the requested cipher suite must use FIPS-certified cryptography in WebSphere MQ.
    KeyResetCount The total number of non-encrypted bytes that can be sent and received within an SSL conversation before the secret key is renegotiated. If left blank or set to zero (default), the secret key is never renegotiated. This value is ignored if no cipher suite is specified. Valid values are integers 0 - 999,999,999.
    Note: KeyResetCount is not supported in WebSphere MQ 5.3.s but is supported in WebSphere MQ 6.0 (or later).
    Truststore To enable server authentication, select the server identity store that was configured in Rational Integration Tester’s Physical View.
    Keystore To enable client authentication, select the client identity store that was configured in Rational Integration Tester’s Physical View.
    Note: For more information, see Rational Integration Tester reference.

Feedback