Securing the network

Secure the network connections between the source and remote queue managers.


Use signed certificates to verify the authenticity of the source and remote queue managers. Transfer messages using a TLS network to encrypt messages.

  • Preparing the queue managers to use TLS
    The IBM MQ queue manager's key repository is used to store the queue manager's personal certificate and the public Certificate Authority (CA) certificate. The personal certificate request from the IBM MQ queue manager must be signed by a CA, the public certificate is used by the other entities to authenticate the IBM MQ queue manager.
  • Create the channels to use TLS
    Create a new channel that uses TLS to create a connection.

Parent topic: Securing the point-to-point topology Previous topic: Securing the target queue manager objects