Skip to content

IBM MQ Queue Manager Key

Service Name: IBM MQ

Service Description: IBM MQ is an enterprise message queuing solution that enables applications to communicate and exchange data across different platforms and environments through asynchronous messaging.

Service Address: https://www.ibm.com/products/mq

Validation Type: -

IP Allow list: IP restrictions can be configured at the queue manager level through channel authentication records (CHLAUTH).

Secret Access Scope: Grants administrative access to IBM MQ queue managers, allowing configuration changes, queue management, and message operations.

Secret Revokement URL: https://www.ibm.com/docs/en/ibm-mq/9.2?topic=security-setting-up-your-authorization-service

Secret Example: AMQ.NEW.CERTIFICATE.STORE:PASSWORD=MyP@ssw0rd123

Suspicious Activity Investigation Instructions:

  • Review IBM MQ error logs for unauthorized access attempts or configuration changes
  • Check queue manager activity logs for unusual operations or connection patterns
  • Monitor for unexpected changes to queue definitions, channel configurations, or security settings
  • Examine authentication records for unauthorized connection attempts
  • Review message traffic patterns for anomalies or unexpected volumes

Mitigation Instructions:

  • Immediately change the queue manager password or certificate store password
  • Revoke and reissue any compromised certificates used for authentication
  • Update channel authentication records (CHLAUTH) to restrict access
  • Implement or update IP filtering rules to limit connections to trusted sources
  • Enable detailed security auditing for the affected queue managers
  • Review and restrict administrative authorities to only necessary personnel
  • Consider implementing TLS encryption for all channel communications
  • Rotate all affected credentials and update applications accordingly