Security

In WebSphere MQ, there are three methods of providing security:

Object Authority Manager (OAM) facility

Authorization for using MQI calls, commands, and access to objects is provided by the Object Authority Manager (OAM), which by default is enabled. Access to WebSphere MQ entities is controlled through WebSphere MQ user groups and the OAM. We provide a command line interface to enable administrators to grant or revoke authorizations as required.

For more information about creating authorization service components, see Chapter 10, WebSphere MQ security.

DCE security

Channel exits that use the DCE Generic Security Service (GSS) are provided by WebSphere MQ. For more information, see WebSphere MQ Intercommunication.

Channel security using SSL

The Secure Sockets Layer (SSL) protocol provides industry-standard channel security, with protection against eavesdropping, tampering, and impersonation.

SSL uses public key and symmetric techniques to provide message privacy and integrity and mutual authentication.

For a comprehensive review of security in WebSphere MQ including detailed information on SSL, see WebSphere MQ Security. For an overview of SSL, including pointers to the commands described in this book, see Protecting channels with SSL.



© IBM Corporation 1994, 2002. All Rights Reserved