MQSSLFIPS

MQSSLFIPS specifies whether only FIPS-certified algorithms are to be used if cryptography is carried out in IBM MQ . The values are the same as for the SSLFIPS parameter of the ALTER QMGR command.

The use of FIPS-certified algorithms is affected by the use of cryptographic hardware, see Specify that only FIPS-certified CipherSpecs are used at run time on the MQI client.

To set this variable use one of these commands:

  • On Windows systems:
    SET MQSSLFIPS=YES|NO
    
  • On UNIX and Linux systems:
    export MQSSLFIPS=YES|NO
    
  • On IBM i:
    ADDENVVAR ENVVAR(MQSSLFIPS) VALUE(YES|NO)
    

The default is NO. Parent topic: Use IBM MQ environment variables