WebSphere MQ Advanced Message Security

End-to-end, message-level security

• Supports Hardware Security Modules (HSM) for tamper-proof key storage.
• Uses data encryption, authorization policies and authentication with digital signatures.
• Allows security at the message level, instead of at the queue or connection level.
• Uses public key infrastructure (PKI) technology to provide authentication, authorization, confidentiality and data integrity services.
• Works with tools that can simplify compliance with common security standards.

Data encryption and authentication

• Encrypt messages at the point of inception and keep them encrypted and unable to be modified until they reach their final destination.
• Strengthen data privacy by prohibiting messages from being read in plain text, including in memory, in data queues, in log files and in trace processes.
• Work with message headers in plain text for proper routing by the queue manager.
• Decrypt and authenticate messages only at their final, authorized destination.
• Use digital signatures to verify message origin and integrity.

Centralized policy capabilities

• Provide centralized, remote management of message security policies for mainframe and distributed servers.
• Enable administrators to specify a range of messaging restrictions, such as authorizing signers and recipients of messages on specific queues.
• Manage and enforce messaging policies using the graphical WebSphere MQ Explorer tool or command line tools.
• Separate administrator duties from sender and receiver rights.
• Configure message-level security policies that assist with your auditing and compliance requirements.

Application-level security protection

• Protects the security of messages as they flow from one application to another without changing or recompiling application code.
• Simplifies the development of new applications by eliminating complex security coding.

Integration with WebSphere MQ and other products

• Integrates with existing WebSphere MQ and IBM WebSphere Message Broker deployments and applications for additional security.
• Integrates directly within WebSphere MQ without installing a separate product.
• Uses other WebSphere MQ products for an end-to-end, security-rich messaging capability, without changing existing applications.
• Speeds deployment by eliminating the need for additional servers, daemon processes or changes to existing applications.
• Eliminates complex, time-consuming configuration often required with additional security management systems.