Confidentiality of messages

To maintain confidentiality, encrypt your messages. There are various methods of encrypting messages in IBM MQ depending on your needs.

Your choice of CipherSpec determines what level of confidentiality we have.

If you need application-level, end-to-end data protection for your point to point messaging infrastructure, we can use Advanced Message Security to encrypt the messages, or write your own API exit or API-crossing exit.

If you need to encrypt messages only while they are being transported through a channel, because we have adequate security on your queue managers, we can use TLS, or we can write your own security exit, message exit, or send and receive exit programs.

For more information about Advanced Message Security, see Advanced Message Security. The use of TLS with IBM MQ is described at TLS security protocols in IBM MQ. The use of exit programs in message encryption is described at Implementing confidentiality in user exit programs.