| Author | Message | 
		
		  | narayanarvr | 
			  
				|  Posted: Tue Mar 21, 2017 1:46 am    Post subject: need good tutorial on MQ secirity |   |  | 
		
		  |  Voyager
 
 
 Joined: 09 Oct 2012Posts: 84
 
 
 | 
			  
				| Hi All, 
 Any one, please provide good tutorial links to learn Mq security in depth.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | Vitor | 
			  
				|  Posted: Tue Mar 21, 2017 4:25 am    Post subject: |   |  | 
		
		  |  Grand High Poobah
 
 
 Joined: 11 Nov 2005Posts: 26093
 Location: Texas, USA
 
 | 
			  
				| Anything written by Morag or T.Rob _________________
 Honesty is the best policy.
 Insanity is the best defence.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | DeadPool | 
			  
				|  Posted: Tue Mar 21, 2017 4:32 am    Post subject: |   |  | 
		
		  | Apprentice
 
 
 Joined: 27 May 2016Posts: 30
 
 
 | 
			  
				| 
   
	| Vitor wrote: |  
	| Anything written by Morag or T.Rob |             |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | PaulClarke | 
			  
				|  Posted: Tue Mar 21, 2017 9:23 am    Post subject: |   |  | 
		
		  |  Grand Master
 
 
 Joined: 17 Nov 2005Posts: 1002
 Location: New Zealand
 
 | 
			  
				| Ha! Is Morag really that typecast   
 While both Morag and T.Rob are undoubtedly MQ Security experts both of them have many other strings to their bows and write on a wide variety of topics. So narayanarvr may not find what they are looking for in many of their blogs/posts.
 
 I think, narayanarvr, that you may get directed better if you are more specific about what you are looking for. What aspect of security concerns you ? After all the MQ Info Centre contains pretty much all you need to know. However, certain aspects have been condensed down in to more consumable sections in blogs posts and presentations. So, what are you interested in  MQ Access control? Channel Auth Security? SSL/TLS ?
 
 Cheers,
 Paul.
 _________________
 Paul Clarke
 MQGem Software
 www.mqgem.com
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | narayanarvr | 
			  
				|  Posted: Tue Mar 21, 2017 9:28 am    Post subject: |   |  | 
		
		  |  Voyager
 
 
 Joined: 09 Oct 2012Posts: 84
 
 
 | 
			  
				| Hi Paul, 
 I am looking for a tutorial which gives some practical examples and save time
 
 I need Channel Auth Security and SSL/TLS
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | Vitor | 
			  
				|  Posted: Tue Mar 21, 2017 10:01 am    Post subject: |   |  | 
		
		  |  Grand High Poobah
 
 
 Joined: 11 Nov 2005Posts: 26093
 Location: Texas, USA
 
 | 
			  
				| 
   
	| narayanarvr wrote: |  
	| I need Channel Auth Security and SSL/TLS |  
 Morag's blog contains a lot of information on channel security, with examples.
 
 T. Rob has written a number of excellent articles (with examples) on SSL/TLS set up and use.
 _________________
 Honesty is the best policy.
 Insanity is the best defence.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | PeterPotkay | 
			  
				|  Posted: Tue Mar 21, 2017 2:27 pm    Post subject: |   |  | 
		
		  |  Poobah
 
 
 Joined: 15 May 2001Posts: 7723
 
 
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | hughson | 
			  
				|  Posted: Tue Mar 21, 2017 3:05 pm    Post subject: |   |  | 
		
		  |  Padawan
 
 
 Joined: 09 May 2013Posts: 1967
 Location: Bay of Plenty, New Zealand
 
 | 
			  
				| 
   
	| narayanarvr wrote: |  
	| I need Channel Auth Security and SSL/TLS |  I gathered together a list of the various CHLAUTH posts here.
 
 T.Rob has a zero to hero 5-minute video on SSL setup.
 
 Cheers
 Morag
 _________________
 Morag Hughson @MoragHughson
 IBM MQ Technical Education Specialist
 Get your IBM MQ training here!
 MQGem Software
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | smdavies99 | 
			  
				|  Posted: Tue Mar 21, 2017 11:54 pm    Post subject: |   |  | 
		
		  |  Jedi Council
 
 
 Joined: 10 Feb 2003Posts: 6076
 Location: Somewhere over the Rainbow this side of Never-never land.
 
 | 
			  
				| Please be aware that even with the truly excellent help that Morag and T-Robb have put together, you won't become an expert overnight or even in six months. Some of us have been using MQ for well over a decade and we are still learning bits of the product that we have never used before.
 
 I took someone who have been using MQ longer than me through setting up a trigger monitor and a triggered queue and application not that long ago. He'd never had to do it so it was all new to him.
 
 So take your time, learn from your mistakes. That means trying thongs out for yourself. Dont be afraid to come back and ask questions when you have tried something and it didn't work as you might have thought it should. That is all part of learing and becoming an expert.
 Even the experts have to refer to the documentation from time to time.
 _________________
 WMQ User since 1999
 MQSI/WBI/WMB/'Thingy' User since 2002
 Linux user since 1995
 
 Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | zpat | 
			  
				|  Posted: Wed Mar 22, 2017 1:24 am    Post subject: |   |  | 
		
		  |  Jedi Council
 
 
 Joined: 19 May 2001Posts: 5867
 Location: UK
 
 | 
			  
				| Security has various aspects, which often have different solutions, although related. 
 
 Identification  (who are you?)
Authentication (how can you prove your id?)
 Authorisation  (what are you allowed to access?)
 Integrity (how to ensure your data is intact?)
 Auditing (what did you do?)
 
 
 In some cases the AMS is needed (especially for integrity)
 _________________
 Well, I don't think there is any question about it. It can only be attributable to human error. This sort of thing has cropped up before, and it has always been due to human error.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | narayanarvr | 
			  
				|  Posted: Wed Mar 22, 2017 1:53 am    Post subject: |   |  | 
		
		  |  Voyager
 
 
 Joined: 09 Oct 2012Posts: 84
 
 
 | 
			  
				| Thanks All, for your excellent suggestions and links, I appreciate your valuable time and support :clap: |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | tczielke | 
			  
				|  Posted: Wed Mar 22, 2017 3:49 pm    Post subject: |   |  | 
		
		  | Guardian
 
 
 Joined: 08 Jul 2010Posts: 942
 Location: Illinois, USA
 
 | 
			  
				| 
   
	| smdavies99 wrote: |  
	| So take your time, learn from your mistakes. That means trying thongs out for yourself. Dont be afraid to come back and ask questions when you have tried something and it didn't work as you might have thought it should. That is all part of learing and becoming an expert. Even the experts have to refer to the documentation from time to time.
 |  
 I make typos too, but that typo in the second sentence there was pretty funny!
   
 Maybe only attempt that in the "security" or your own home.
  _________________
 Working with MQ since 2010.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | PaulClarke | 
			  
				|  Posted: Wed Mar 22, 2017 4:22 pm    Post subject: |   |  | 
		
		  |  Grand Master
 
 
 Joined: 17 Nov 2005Posts: 1002
 Location: New Zealand
 
 | 
			  
				| I would say you have to already be pretty secure in your masculinity to be willing to try thongs out for yourself anyway. _________________
 Paul Clarke
 MQGem Software
 www.mqgem.com
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | smdavies99 | 
			  
				|  Posted: Wed Mar 22, 2017 11:03 pm    Post subject: |   |  | 
		
		  |  Jedi Council
 
 
 Joined: 10 Feb 2003Posts: 6076
 Location: Somewhere over the Rainbow this side of Never-never land.
 
 | 
			  
				| 
   
	| tczielke wrote: |  
	| 
   
	| smdavies99 wrote: |  
	| So take your time, learn from your mistakes. That means trying thongs out for yourself. Dont be afraid to come back and ask questions when you have tried something and it didn't work as you might have thought it should. That is all part of learing and becoming an expert. Even the experts have to refer to the documentation from time to time.
 |  
 I make typos too, but that typo in the second sentence there was pretty funny!
   
 Maybe only attempt that in the "security" or your own home.
  |  
 
          _________________
 WMQ User since 1999
 MQSI/WBI/WMB/'Thingy' User since 2002
 Linux user since 1995
 
 Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  |  |