In WebSphere MQ, there are three methods of providing security:
Authorization for using MQI calls, commands, and access to objects is provided by the Object Authority Manager (OAM), which by default is enabled. Access to WebSphere MQ entities is controlled through WebSphere MQ user groups and the OAM. We provide a command line interface to enable administrators to grant or revoke authorizations as required.
For more information about creating authorization service components, see Chapter 10, WebSphere MQ security.
Channel exits that use the DCE Generic Security Service (GSS) are provided
by WebSphere MQ. For more information, see WebSphere
MQ Intercommunication.
The Secure Sockets Layer (SSL) protocol provides industry-standard channel
security, with protection against eavesdropping, tampering, and
impersonation.
SSL uses public key and symmetric techniques to provide message privacy and
integrity and mutual authentication.
For a comprehensive review of security in WebSphere MQ including detailed
information on SSL, see WebSphere MQ Security. For an overview of SSL, including pointers to the commands described
in this book, see Protecting channels with SSL.Channel security using SSL