Manage security policies

A security policy is a conceptual object that describes the way a message is cryptographically encrypted and signed.

The location from which all administrative tasks related to security policies are run depends on which platform we are using.

On UNIX, and Windows, we use the DELETE POLICY, DISPLAY POLICY, and SET POLICY (or equivalent PCF) commands to manage your security policies.
- On UNIX, administrative tasks can be run from MQ_INSTALLATION_PATH/bin.
- On Windows platforms, administrative tasks can be run from any location as the PATH environment variable is updated at the installation.
On IBM i, the DSPMQMSPL, SETMQMSPL, and WRKMQMSPL commands are installed into the QSYS system library for the primary language of the system when IBM MQ is installed.
Additional national language versions get installed into QSYS29xx libraries according to the language feature load. For example, a machine with US English as the primary language and Korean as the secondary language has the US English commands installed into QSYS and the Korean secondary language load in QSYS2962 as 2962 is the language load for Korean.
On z/OS, the administrative commands are run using the message security policy utility (CSQ0UTIL). When policies are created, modified or deleted on z/OS, the changes are not recognized by Advanced Message Security until the queue manager is stopped and restarted, or the z/OS MODIFY command is used to refresh the Advanced Message Security policy configuration. For example:
```
F <qmgr ssid>AMSM,REFRESH POLICY
```

Create security policies in AMS
Security policies define the way in which a message is protected when the message is put, or how a message must have been protected when a message is received.
Change security policies in AMS
We can use Advanced Message Security to alter details of security policies that we have already defined.
Display and dumping security policies in AMS
Use the dspmqspl command to display a list of all security policies or details of a named policy depending on the command-line parameters you supply.
Removing security policies in AMS
To remove security policies in Advanced Message Security, we must use the setmqspl command.

Parent topic: Administer Advanced Message Security security polices