PROPID_M_PRIV_LEVEL

 

Applies To: Windows 10, Windows 7, Windows 8, Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server Technical Preview, Windows Vista

The PROPID_M_PRIV_LEVEL property specifies the privacy level of the message.

Property ID

PROPID_M_PRIV_LEVEL

Type Indicator

VT_UI4

MQPROPVARIANT Field

ulVal

Property Value

This property can be set to one or more of the following values:

MQMSG_PRIV_LEVEL_BODY

(Not supported for applications compiled with the header and library files for MSMQ 3.0.) Privacy is enforced, and 40-bit end-to-end encryption of the message body is used.

MQMSG_PRIV_LEVEL_BODY_BASE

(Introduced in MSMQ 2.0.) Privacy is enforced, and 40-bit end-to-end encryption of the message body is used.

MQMSG_PRIV_LEVEL_BODY_ENHANCED

(Introduced in MSMQ 2.0.) Privacy is enforced, and 128-bit end-to-end encryption of the message body is used.

MQMSG_PRIV_LEVEL_NONE

The default. No privacy. The message body is sent as clear text.

Remarks

To have Message Queuing encrypt a private message, include PROPID_M_PRIV_LEVEL in the MQMSGPROPS structure and call MQSendMessage. If PROPID_M_PRIV_LEVEL is set to MQMSG_PRIV_LEVEL_BODY, MQMSG_PRIV_LEVEL_BODY_BASE, or MQMSG_PRIV_LEVEL_BODY_ENHANCED, Message Queuing encrypts the body of the message using the algorithm specified by PROPID_M_ENCRYPTION_ALG.

Note

MSMQ 2.0 applications can use MQMSG_PRIV_LEVEL_BODY or MQMSG_PRIV_LEVEL_BODY_BASE to request 40-bit encryption, or they can use MQMSG_PRIV_LEVEL_BODY_ENHANCED to request 128-bit encryption. When requesting encryption, MSMQ 3.0 applications can use only MQMSG_PRIV_LEVEL_BODY_BASE (40-bit encryption) or MQMSG_PRIV_LEVEL_BODY_ENHANCED (128-bit encryption).

It is recommended that you use 128-bit encryption, which provides strong encoding. Attackers can decrypt data encoded with 40-bit encryption relatively easily.

To find out if a message was sent encrypted, include PROPID_M_PRIV_LEVEL in the MQMSGPROPS structure. Then call MQReceiveMessage or MQReceiveMessageByLookupId and examine the returned value. When retrieving this property, the type indicator can be set to VT_UI4 or VT_NULL. If you set the type indicator to VT_NULL, Message Queuing automatically changes the type indicator to VT_UI4 during the function call.

Messages can also be encrypted by applications. If your application is encrypting the message body with a 40-bit key, ignore the PROPID_M_PRIV_LEVEL property when sending messages. If your application is using a 128-bit key, set PROPID_M_PRIV_LEVEL to MQMSG_PRIV_LEVEL_BODY_ENHANCED and include it with the message.

The destination queue can also have its own privacy level (PROPID_M_PRIV_LEVEL), indicating that it will only receive private (encrypted) messages. If the target queue forces privacy, non-encrypted messages will be rejected.

Equivalent COM Property

With COM components, the equivalent property for setting and retrieving the privacy level is MSMQMessage.PrivLevel.

For information on	See
Letting Message Queuing encrypt messages	Message Queuing-Encrypted Messages
Having your application encrypt messages	Application-Encrypted Messages

Example Code

The following code fragments show how PROPID_M_PRIV_LEVEL is specified in arrays that can be used to initialize an MQMSGPROPS structure to request encryption of the message body and to ascertain whether the message was encrypted.

To Set the Privacy Level

aMsgPropID[i] = PROPID_M_PRIV_LEVEL;                // Property ID  
aMsgPropVar[i].vt = VT_UI4;                         // Type indicator  
aMsgPropVar[i].ulVal = MQMSG_PRIV_LEVEL_BODY_BASE;  // Value  
i++;  

To Retrieve the Privacy Level

aMsgPropID[i] = PROPID_M_PRIV_LEVEL;                // Property ID  
aMsgPropVar[i].vt = VT_NULL;                        // Type indicator  
i++;  

The following example is included in Using Message Queuing.

For an example of	See
Sending private messages	C/C++ Code Example: Requesting Encryption

See Also

Message Properties
MQMSGPROPS
MQReceiveMessage
MQReceiveMessageByLookupId
MQSendMessage
PROPID_M_ENCRYPTION_ALG
PROPID_Q_PRIV_LEVEL