Security concepts and mechanisms
This collection of topics describes aspects of security to consider in your IBM MQ installation.
The commonly accepted aspects of security are as follows:
Security mechanisms are technical tools and techniques that are used to implement security services. A mechanism might operate by itself, or with others, to provide a particular service. Examples of common security mechanisms are as follows:
When you are planning an IBM MQ implementation, consider which security mechanisms you require to implement those aspects of security that are important to you. For information about what to consider after we have read these topics, see Plan for security .
Identification and authentication
Identification is the ability to identify uniquely a user of a system or an application that is running in the system. Authentication is the ability to prove that a user or application is genuinely who that person or what that application claims to be.
Authorization
Authorization protects critical resources in a system by limiting access only to authorized users and their applications. It prevents the unauthorized use of a resource or the use of a resource in an unauthorized manner.
Auditing
Auditing is the process of recording and checking events to detect whether any unexpected or unauthorized activity has taken place, or whether any attempt has been made to perform such activity.
Confidentiality
The confidentiality service protects sensitive information from unauthorized disclosure.
Data integrity
The data integrity service detects whether there has been unauthorized modification of data.
Cryptographic concepts
This collection of topics describes the concepts of cryptography applicable to IBM MQ.
Cryptographic security protocols: TLS
Cryptographic protocols provide secure connections, enabling two parties to communicate with privacy and data integrity. The Transport Layer Security (TLS) protocol evolved from that of the Secure Sockets Layer (SSL). IBM MQ supports TLS.
Parent topic: Security overview
Related concepts
Related information