ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexGeneral IBM MQ SupportMQ Advance Message Security

Post new topicReply to topic
MQ Advance Message Security View previous topic :: View next topic
Author Message
mq__quest
PostPosted: Thu Nov 02, 2017 8:56 pm Post subject: MQ Advance Message Security Reply with quote

Novice

Joined: 21 Aug 2017
Posts: 10

KC says AMS is available with MQ Client, can a ams enabled mq client be used to send and receive encrypted messages to/from non ams enabled mq server component?
Back to top
View user's profile Send private message
exerk
PostPosted: Fri Nov 03, 2017 12:09 am Post subject: Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 5749

If you mean AMS-encrypted, no.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.

Back to top
View user's profile Send private message
mq__quest
PostPosted: Fri Nov 03, 2017 5:25 am Post subject: Reply with quote

Novice

Joined: 21 Aug 2017
Posts: 10

exerk wrote:
If you mean AMS-encrypted, no.


Yes, AMS encryption. If it can't then what is the purpose of having AMS included in client? SSL already does the encryption right?
Back to top
View user's profile Send private message
Vitor
PostPosted: Fri Nov 03, 2017 5:28 am Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 24614
Location: Ohio, USA

mq__quest wrote:
exerk wrote:
Yes, AMS encryption. If it can't then what is the purpose of having AMS included in client? SSL already does the encryption right?


AMS requires a specific client that can prove it's allowed to receive the decrypted data. If you could retrieve the data from an encrypted queue by connecting with a normal client, that devalues the protection AMS provides.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
RogerLacroix
PostPosted: Fri Nov 03, 2017 12:40 pm Post subject: Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3020
Location: London, ON Canada

Vitor wrote:
If you could retrieve the data from an encrypted queue by connecting with a normal client, that devalues the protection AMS provides.

Be careful with that line. The queue is not encrypted but rather the message and anyone with the correct OAM permission can get the message. The difference is that one user may not be able to decrypt the message, hence, they will receive a buffer of what appears to be crap.

i.e. An MQAmin that uses 'mqm' on Linux/Unix can browse/read all messages on a queue. The difference is that AMS will not decrypt if 'mqm' is not on the recipients list. Hence, 'mqm' will get the raw encrypted data.

Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:
Post new topicReply to topic Page 1 of 1

MQSeries.net Forum IndexGeneral IBM MQ SupportMQ Advance Message Security
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.