MQSeries.net :: View topic - Broker and hardware HSM support

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Broker and hardware HSM support

Broker and hardware HSM support

« View previous topic :: View next topic »

Author

Message

Reddiough

Posted: Mon Mar 05, 2012 2:53 am Post subject: Broker and hardware HSM support

Novice

Joined: 27 Jun 2001
Posts: 23

Hi,
does anyone know if broker can talk to a hardware HSM (for instance SafeNet Luna SA HSM).

WMQ can do it and I'm told WAS can do it but can't see any support for broker.

We're on broker v7 but can't see any support in v8 either.

Any help greatly appreciated.

Tony.
_________________
Tony Reddiough
Certified MQSeries Consultant

smdavies99

Posted: Mon Mar 05, 2012 4:35 am Post subject:

Jedi Council

Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.

Tony,
HSM's are pretty specialised bits of kit. I've programmed them in the past but that was before Broker was even thought of.

How does MQ use it? Is it to pass queries in/out or is it used for validate tokens etc?
If it is to pass queries then there should be no reason why broker can't talk to it via MQ.

The ones I've used before connected over Ethernet so we had a totally private LAN just for the HSM traffic and the Cluster Heartbeats.
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995

Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions.

Reddiough

Posted: Mon Mar 05, 2012 4:56 am Post subject:

Novice

Joined: 27 Jun 2001
Posts: 23

As I understand it, whenever MQ needs to validate a certificate or provide a certificate to the other end of the channel it goes off to the HSM instead of using the software keystore as usual.

So my question is, can broker do the same when dealing with HTTP traffic (both inbound and out).
_________________
Tony Reddiough
Certified MQSeries Consultant

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Broker and hardware HSM support

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP