Tivoli Access Manager for Business Integration Host Edition

The architecture of Tivoli Access Manager for Business Integration Host Edition (TAMBIE HE) centered around securing WebSphere MQ messages. Key components included the Policy Server, Authorization Server, and WebSphere MQ Security Exit. The Policy Server stored and managed security policies.

The Authorization Server enforced these policies, determining whether a user had access to a specific MQ resource. The WebSphere MQ Security Exit intercepted messages as they passed through the MQ queue manager, applying the security policies. Communication between components was primarily through internal protocols.

The Policy Server and Authorization Server could be on separate machines, communicating over a network. The WebSphere MQ Security Exit resided within the MQ queue manager address space. Databases were used for storing policy and user information.

The specific database used depended on the configuration. Ports and network requirements included the ports used by MQ for communication and the ports used by the Policy Server and Authorization Server. The `pdadmin` command-line interface was used for configuration and management.

509 certificates. Access control was based on RBAC. Encryption was provided for message content.

TAMBIE HE is not supported; WebSphere MQ Extended Security Edition or IBM MQ Advanced Message Security are recommended replacements.