Working with channel authentication records

We can use the channel authentication records widget in the IBM MQ Console to add and delete channel authentication records on a queue manager. We can also view and set the properties for channel authentication records.

Before you begin

You must create a channel authentication records widget before we can use it. For more information about creating IBM MQ object widgets, see Working with IBM MQ objects.

About this task

To exercise more precise control over the access that is granted to connecting systems at a channel level, we can use channel authentication records.

To enforce security, we can use blocking channel authentication records to block access to your channels. We can also use address map channel authentication records to allow access to specified users. To learn more about channel authentication records, see Channel authentication records.

Procedure

• To add a channel authentication record with an SSL/TLS distinguished name identity, see Creating channel authentication records with an SSL/TLS Distinguished Name identity.
• To add a channel authentication record with a client application user ID identity, see Creating channel authentication records with a client application user ID identity.
• To add a channel authentication record with a remote queue manager name identity, see Creating channel authentication records with a remote queue manager name identity.
• To add a channel authentication record with an address identity, see Creating channel authentication records with an IP address identity.
• To delete a channel authentication record:
  1. Select the channel authentication record to delete from the list in the channel authentication records widget.
  2. Click the delete icon in the widget toolbar.
  3. Confirm to delete the channel authentication record by clicking Delete. The channel authentication record is deleted.
• To view and edit the properties of a channel authentication record:
  1. Select the channel authentication record to edit from the list in the channel authentication record widget.
  2. Click the properties icon in the widget toolbar. Alternatively, double-click the channel authentication record.
  3. View the properties and edit them as required. If the property text box is disabled, the property is read-only, or can be edited only from the command line.