Configure TLS security for IBM MQ

To configure TLS security, you set up TLS on each queue manager and each client that uses TLS-enabled connections.

About this task

For an introduction, and details on how certificates are used to establish TLS connections, see Use SSL security with IBM MQ .

Set up TLS on a queue manager

To set up TLS on a queue manager, for each queue manager that uses TLS-enabled connections:

Procedure

1. Manage the digital certificates that are used by the queue manager. For more information, see Managing SSL certificates.
2. Configure the queue manager for TLS-enabled messaging. For more information, see Configure SSL on queue managers.
3. Configure channels to support secure messaging using TLS. For more information, see Configure SSL channels.

Results

Set up TLS on a IBM MQ MQI client

To set up TLS on a IBM MQ client, for each client that uses TLS-enabled connections:

1. Manage the digital certificates that are used by the client. For more information, see Managing SSL certificates.
2. Configure the client for TLS-enabled messaging. For more information, see Configure SSL on IBM MQ clients.
3. Configure the client channel definition to support secure messaging using TLS. For more information, see Configure SSL on IBM MQ clients.

For more information, see Securing in the IBM MQ online product documentation.