z/MQAUSX

The architecture of z/MQAUSX comprises several key components designed to secure WebSphere MQ on z/OS. The MQAUSX Security Exit is the core component, intercepting MQ API calls to validate user credentials. The Configuration Manager allows administrators to define security policies, user access rights, and authentication methods (RACF or internal database).

The Logging Facility records all authentication attempts, successes, and failures, providing detailed audit trails. The client-side security exit ensures that security credentials can be encrypted. Communication between components occurs within the z/OS environment, utilizing standard MQ protocols.

The product does not use a separate database; it relies on the z/OS external security manager (such as RACF) or an internal database for user authentication. Network requirements are minimal, as the product operates within the z/OS environment. The security exit must be linked into the MQ address space.

The product integrates with existing z/OS security infrastructure, providing a robust and secure solution for MQ access control. Compared to IBM MQ Security, z/MQAUSX offers a client-side security exit for encrypted credentials.