XMSC_WMQ_SSL_FIPS_REQUIRED

Data type:
Boolean
Property of:
ConnectionFactory

The value of this property determines whether an application can or cannot use non-FIPS compliant cipher suites. If this property is set to true, only FIPS algorithms are used for the client-server connection.

This property can have the following values, which translate to the two canonical values for MQSCO.FipsRequired:

Table 1. Table of values for MQSCO.FlipsRequired property
Value Description Corresponding value of MQSCO.FipsRequired
false Any CipherSpec can be used. MQSSL_FIPS_NO (the default)
true Only FIPS-certified cryptographic algorithms can be used in the CipherSpec applying to this client connection. MQSSL_FIPS_YES

XMS copies the relevant value into MQSCO.FipsRequired before calling MQCONNX.

The parameter MQSCO.FipsRequired is only available from IBM® WebSphere® MQ version 6. If IBM WebSphere MQ version 5.3, if this property is set, XMS does not attempt to make the connection to the queue manager, and throws an appropriate exception instead.

For .NET only: Managed connections to IBM WebSphere MQ (WMQ_CM_CLIENT) does not support SSL connections, but might be supported by using an unmanaged connection (WMQ_CM_CLIENT_UNMANAGED).