Security installation tasks for z/OS

After installing and customizing IBM MQ , authorize started task procedures to RACF®, authorize access to various resources, and set up RACF definitions. Optionally, configure your system for TLS.

When IBM MQ is first installed and customized, you must perform these security-related tasks:
  1. Set up IBM MQ data set and system security by:

    • Authorizing the queue manager started-task procedure xxxxMSTR and the distributed queuing started-task procedure xxxxCHIN to run under RACF.
    • Authorizing access to queue manager data sets.
    • Authorizing access to resources for those user IDs that will use the queue manager and utility programs.
    • Authorizing access for those queue managers that will use the coupling facility list structures.
    • Authorizing access for those queue managers that will use Db2®.
  2. Set up RACF definitions for IBM MQ security.
  3. If you want to use Transport Layer Security (TLS), prepare your system to use certificates and keys.