ALTER SECURITY on z/OS

Use the MQSC command ALTER SECURITY to define system-wide security options.


Use MQSC commands

For information on how we use MQSC commands, see Performing local administration tasks using MQSC commands.

Parameters not specified in the ALTER SECURITY command result in the existing values for those parameters being left unchanged.

We can issue this command from sources 12CR. For an explanation of the source symbols, see Use commands on z/OS®.

Synonym: ALT SEC

ALTER SECURITY

ALTER SECURITY CMDSCOPE(' ')CMDSCOPE(qmgr-name)
  • 1
  • CMDSCOPE(*)1
  • security attrs
  • Security attrsINTERVAL(integer)
  • TIMEOUT(integer)
  • Notes:

    • 1 Valid only on z/OS when the queue manager is a member of a queue sharing group.


    Parameter descriptions for ALTER SECURITY

    The parameters you specify override the current parameter values. Attributes that we do not specify are unchanged. Note: If we do not specify any parameters, the command completes successfully, but no security options are changed.

      CMDSCOPE
      This parameter specifies how the command runs when the queue manager is a member of a queue sharing group. CMDSCOPE cannot be used for commands issued from the first initialization input data set CSQINP1.

        ' '
        The command runs on the queue manager on which it was entered.

        qmgr-name
        The command runs on the queue manager you specify, providing the queue manager is active within the queue sharing group.

        We can specify a queue manager name, other than the queue manager on which the command was entered, only if you are using a queue sharing group environment and if the command server is enabled.

        *
        The command runs on the local queue manager and is also passed to every active queue manager in the queue sharing group. The effect of * is the same as entering the command on every queue manager in the queue sharing group.

      INTERVAL(integer)
      The interval between checks for user IDs and their associated resources to determine whether the TIMEOUT has expired. The value is in minutes, in the range zero through 10080 (one week). If INTERVAL is specified as zero, no user timeouts occur.

      TIMEOUT(integer)
      How long security information about an unused user ID and associated resources is retained by IBM MQ . The value specifies a number of minutes in the range zero through 10080 (one week). If TIMEOUT is specified as zero, and INTERVAL is nonzero, all such information is discarded by the queue manager every INTERVAL number of minutes.

    The length of time that an unused user ID and associated resources are retained by IBM MQ depends on the value of INTERVAL. The user ID times out at a time between TIMEOUT and TIMEOUT plus INTERVAL.

    When the TIMEOUT and INTERVAL parameters are changed, the previous timer request is canceled and a new timer request is scheduled immediately, using the new TIMEOUT value. When the timer request is actioned, a new value for INTERVAL is set.