Integration


This is an IBM Automation portal for Integration products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.


Add a new idea Subscribe
Status Functionality already exists
Workspace MQ, MQ Advanced & MQ Appliance
Created by Guest
Created on Aug 20, 2026

RELATED IDEAS

Have modern TLS levels by default in MQ, and not very old ones.

When MQ 10 starts it produces

 

+CSQX694I %CSQ9 CSQXSSLI Cipher specifications based on the TLS V1.0 protocol are disabled                                                    
+CSQX668I %CSQ9 CSQXSSLI Cipher specifications based on the TLS V1.2 protocol are disabled                                                    
+CSQX670I %CSQ9 CSQXSSLI Cipher specifications based on the TLS V1.3 protocol are disabled    

1.2 and 1.3 should be enabled by default, and 1.0 and 1.1 disabled by default.   

 

I found on the internet

TLS 1.1 was officially deprecated by the Internet Engineering Task Force (IETF) in March 2021 via RFC 8996. Major web browsers dropped support in early 2020, and cloud providers, operating systems, and enterprise services have phased it out through 2025 and early 2026.                                             

Idea priority Low
  • Guest
    Aug 24, 2026

    Good point.   A better solution would be to add a message before those messages, saying keyring not defined then it is clearer.

    Reply
  • Admin
    Matthew Leming
    Aug 24, 2026

    For MQ on z/OS to use TLS at all it needs to be given a RACF keyring and to have a number of SSL tasks configured.
    If that is not done then you will get the message you saw.

    +CSQX690I %CSQ9 CSQXSSLI Cipher specifications based on the SSLv3 protocol are disabled
    +CSQX694I %CSQ9 CSQXSSLI Cipher specifications based on the TLS V1.0 protocol are disabled
    +CSQX668I %CSQ9 CSQXSSLI Cipher specifications based on the TLS V1.2 protocol are disabled
    +CSQX670I %CSQ9 CSQXSSLI Cipher specifications based on the TLS V1.3 protocol are disabled

    If that is done then you will get

    +CSQX690I %CSQ9 CSQXSSLI Cipher specifications based on the SSLv3 protocol are disabled
    +CSQX694I %CSQ9 CSQXSSLI Cipher specifications based on the TLS V1.0 protocol are disabled
    +CSQX668I %CSQ9 CSQXSSLI Cipher specifications based on the TLS V1.2 protocol are enabled
    +CSQX670I %CSQ9 CSQXSSLI Cipher specifications based on the TLS V1.3 protocol are enabled


    Which I believe meets your requirement. As you say both SSL 3 and TLS 1 are not recommended and have to be explicitly forced on if customers want them.
    When SystemSSL remove support for them we will to. As you might have seen, MQ distributed removed support for them at version 10.
    We have never supported TLS 1.1.





    Reply

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.