Operating Advanced Message Security on z/OS

The Advanced Message Security address space accepts commands using the z/OS® MODIFY command.

To enter commands for the Advanced Message Security address space, use the z/OS MODIFY command.

For example,

F qmgr AMSM, cmd

The following MODIFY commands are accepted:

Table 1. Advanced Message Security address space MODIFY commands
Command	Option	Description
DISPLAY		Display version information
REFRESH	KEYRING POLICY ALL	Refresh the key ring certificates, security policies, or both.
SMFAUDIT	SUCCESS FAILURE ALL	Set whether SMF auditing is required when AMS successfully protects/unprotects messages, when AMS fails to protect/unprotect messages, or both.
SMFTYPE	0 - 255	Set the SMF record type to be generated when AMS protects/unprotects messages. To disable SMF auditing specify a record type of 0.

Note: To specify an option it must be separated by a comma. For example:

F qmgrAMSM,REFRESH KEYRING
F qmgrAMSM,SMFAUDIT ALL
F qmgrAMSM,SMFTYPE 180

REFRESH command.

An application issuing an MQOPEN call will pick up the changes. Existing applications continue to use the options from when that application opened the queue. To pick up the changes, an application has to close and reopen the queue.