If you are thinking about migrating to z/OS 2.3 you should be aware that System SSL in z/OS 2.3 will start to enforce stricter minimum key sizes. As MQ for z/OS uses System SSL for both TLS channels and AMS these changes apply to MQ and need to be checked for, and mitigated, before migrating to z/OS 2.3.

Details of the changes are here:
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.e0zm100/SSL_V2R3_StrongerKeys_before_IPL.htm

So if you are thinking about moving to z/OS 2.3, and are using TLS channels or AMS, go and check your certificates, including those that are used from distributed queue managers or clients!

Join The Discussion

Your email address will not be published.