z/OS Migrating a queue manager to mixed case security

Follow these steps to migrate a queue manager to mixed case security. You review the level of security product you are using and activate the new IBM® MQ external security monitor classes. Run the REFRESH SECURITY command to activate the mixed-case profiles.

Before you begin

  1. Install a level of the security product that supports mixed case security.
  2. Apply any updates required by IBM MQ.
  3. Install and activate the new IBM MQ external security monitor classes.

About this task

Follow these steps to convert a queue manager to mixed case security.

Procedure

  1. Copy all your existing profiles and access levels from the uppercase classes to the equivalent mixed case external security monitor class.
    1. MQADMIN to MXADMIN.
    2. MQPROC to MXPROC.
    3. MQNLIST to MXNLIST.
    4. MQQUEUE to MXQUEUE.
  2. Start the queue manager.

    The queue manager SCYCASE attribute is set to UPPER.

  3. Change the value of the SCYCASE attribute to MIXED. 
    
ALTER QMGR SCYCASE(MIXED)
  4. Activate your existing security profiles. 
    
REFRESH SECURITY(*) TYPE(CLASSES)
  5. Test that your security profiles are working correctly.

What to do next

Review your object definitions and create new mixed case profiles as appropriate, using REFRESH SECURITY as required to activate the profiles.