Category Archives: WMQ Security

WebSphere MQ Security-related posts.

Avoiding reputational damage

Posted on January 28, 2015 by T.Rob

Everyone knows that data breaches are expensive.  Security venders never tire of telling us exactly how expensive breaches are, on a per-incident or per-record basis.  In the case of a large retail brand, a breach can make a significant dent … Continue reading →

Posted in IBMMQ, Security, WMQ Security | Tagged , , , , , , | 2 Comments

Configuration backups: the forgotten WMQ security control

Posted on March 12, 2014 by T.Rob

Update: IBM has reconsidered and has announced that dmpmqcfg will be fixed as a defect! Subscribe if you would like a notification when the fix is announced. But please do read the post, especially if you are using amqoamd for … Continue reading →

Posted in Fail, General, IBMMQ, IIB, MQ AMS, MQMFT, Security, WMQ ESE, WMQ Security | Tagged , , , , , , , | Leave a comment

Cluster security

Posted on July 10, 2012 by T.Rob

Well, the residency to write the new WebSphere MQ Security book is past the halfway point and we are working diligently to finish up on time. I’m happy to say that one of my favorite new security topics is covered … Continue reading →

Posted in Events, IBMMQ, News, Publications, WMQ Security | Tagged , , , , , , , , , , | 1 Comment

Thoughts on certificate sharing

Posted on June 9, 2012 by T.Rob

The topic of certificate sharing keeps popping up as of late so I wanted to address it here.  The main objection to certificate-based crypto seems to be the administrative overhead.  After having scripted up certificate management for several customers, I … Continue reading →

Posted in IBMMQ, MQ AMS, WMQ Security | Tagged , , , , , , , , , , , | Leave a comment

PCI zone and non PCI zone in same DataPower box

Posted on March 16, 2012 by T.Rob

I’ve been having PCI Déjà vu lately.  It seems the same questions keep coming up over and over.  One strategy for compliance that is nearly ubiquitous is to segregate the PCI data from the rest of the network.  In practical terms, … Continue reading →

Posted in General, WMQ Security | Tagged , , , , , , | 4 Comments

GWC Webinar posted

Posted on January 19, 2012 by T.Rob

The WebSphere MQ Security Deeper Dive slides from the  Global WebSphere Community webinar last month are now posted on this site.  You can get them from the Links page or just click here.  If you want the screencast and recording … Continue reading →

Posted in IBMMQ, MQ AMS, News, Publications, WMQ Security | Leave a comment

Previous security lab reposted

Posted on November 9, 2011 by T.Rob

I acted a bit too hastily in removing the old WMQ Security Lab download when the new one was posted.  Several readers reminded me that the new lab is for v7.1 and that isn’t even out yet!  Everyone who needs … Continue reading →

Posted in IBMMQ, Publications, WMQ Security | Leave a comment

Encrypting passwords in config files – secure or not?

Posted on October 24, 2011 by T.Rob

Not long ago a colleague told me he wished that he could use a .kdb format keystore for his Java applications.  When I inquired as to why, he said he liked that the .kdb includes the ability to stash an … Continue reading →

Posted in General, WMQ Security | 3 Comments

WMQ Security in v7.1

Posted on October 18, 2011 by T.Rob

For those of you who missed it, Morag presented the WMQ Security session at this year’s WebSphere Technical Conference last week.  This was exciting for a few reasons, not the least of which was – did I mention MORAG presented? … Continue reading →

Posted in IBMMQ, News, WMQ Security | 1 Comment

Guest blogger @ WebSphere User Group

Posted on August 11, 2011 by T.Rob

Ben Wen and I were invited to be guest bloggers at WebSphere User Group this month so the post I was planning for this space was hijacked! You can read it at WebSphere User Group posted as The Invisible Threat.

Posted in IBMMQ, News, Publications, WMQ Security | Tagged , , , , , , , , | Leave a comment