Setting Up TIBCO ActiveMatrix BusinessWorks

After setting up the WebSphere MQ queue manager, you can configure TIBCO ActiveMatrix BusinessWorks to use the secure channel.

1. In TIBCO Business Studio, open an existing project or create a new one.
2. Create a WebSphere MQ connection.
3. Configure the shared resource.
   1. In the General panel, type a name in the Name field.
   2. In the Queue Manager Connection Configuration panel, click Remote in the Binding area.
   3. Enter remote connection values in the Host Name, Port, User Name, Password, and Server Channel Name fields.
   4. In the Pooling Configuration panel, select Pooling Enabled check box.
   See WebSphere MQ Connection for more information about the configuration.

   

4. Start the IBM Key Manager tool using the strmqikm program.
   This program is located in the mqm/bin directory in the WebSphere MQ server installation.
5. Using the IBM Key Manager, open the client keystore created by the script during the Setting Up WebSphere MQ Queue Manager.

   

6. Create a Java keystore from the contents of the IBM keystore.
   1. Select the client identity alias, and click Save As from the File menu.
   2. Change the keystore type to JKS and enter a new name for the client keystore in the Save As dialog.
      This is the file that you reference from the connection resource, as pictured previously.
   3. Set the Key file type to JKS.
   4. Click Save.
   5. At the prompt, enter a password to be used with the keystore.
7. Specify the WebSphere MQ connection shared resource created in Step 2.
   1. Select the Transport Layer Security check box in the TLS Configuration panel.
   2. Click next to the TLS Configuration field.
      You can create an SSL Client Configuration resource in the pop-up window.
8. Configure the SSL Client Configuration resource.
   1. In the General panel, type a name in the Name field.
   2. In the Basic SSL Client Configuration panel, click next to the Keystore Provider as Trust Store field.
      You can create a Keystore Provider resource in the pop-up window.
9. Configure the Keystore Provider resource.
   1. In the General panel, type a name in the Name field.
   2. Select SUN from the Provider list.
   3. In the URL field, specify the java keystore used for the credentials of this connection.
   4. Specify the value in the Password field.
   5. Select JKS from the Type list.

   

10. In the created SSL Client Configuration resource, select TLSv1 from the SSL Protocol list.

    See TIBCO ActiveMatrix BusinessWorks Bindings and Palettes Reference for more information about the configuration.