Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.
Matt Leming Published on 02/05/2018 / Updated on 30/07/2018
If you are thinking about migrating to z/OS 2.3 you should be aware that System SSL in z/OS 2.3 will start to enforce stricter minimum key sizes. As MQ for z/OS uses System SSL for both TLS channels and AMS these changes apply to MQ and need to be checked for, and mitigated, before migrating to z/OS 2.3.
Details of the changes are here: https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.e0zm100/SSL_V2R3_StrongerKeys_before_IPL.htm
So if you are thinking about moving to z/OS 2.3, and are using TLS channels or AMS, go and check your certificates, including those that are used from distributed queue managers or clients!