dspmqspl (display security policy)
Use the dspmqspl command to display a list of all policies and details of a named policy.
Syntax
Command flag | Explanation |
---|---|
-m | Queue manager name (mandatory). |
-p | Policy name. |
-export The output is written to a DD named EXPORT | Adding this flag generates output which can easily be applied to a different queue manager. |
Examples
The dspmqspl command shows the key reuse count for all policies. The following example is the output you receive on Multiplatforms:Policy Details: Policy name: PROT Quality of protection: PRIVACY Signature algorithm: SHA256 Encryption algorithm: AES256 Signer DNs: - Recipient DNs: CN=Name, O=Organization, C=Country Toleration: 0 Key Reuse Count: 0 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Policy Details: Policy name: PROT2 Quality of protection: CONFIDENTIALITY Signature algorithm: NONE Encryption algorithm: AES256 Signer DNs: - Recipient DNs: CN=Name, O=Organization, C=Country Toleration: 0 Key Reuse Count: 100
On z/OS, we can use the dspmqspl command with the CSQ0UTIL utility. For more information, see The message security policy utility (CSQ0UTIL).