As eluded to below by some of the other posts... Authenicaton of messages is not provided by WMQ. It only provides for authorization. If you have any data security compliance requirements. (Which ...
Hmmm.... That's a new one. We are on the PCI security council and I have not heard that. May I inquire if that is a self imposed requirement by your firm? There is no where in the 252 requirements ...
I wrote the compliance regulations for the auditors who are PCI Vendors for WMQ. There are 252 requirements you have to comply with for PCI DSS. You can contact me and I can help you.