Course Outline
Advanced Queue Manager Configuration
- Implement custom queue manager startup and shutdown procedures using strmqm and endmqm.
- Configure dead letter queues and alias queues for complex message routing scenarios.
- Develop and register channel exits and message exits for custom processing needs.
- Set up advanced TCP and LU62 listener configurations with custom port ranges.
Channel Authentication with CHLAUTH
- Create and manage CHLAUTH records using SET CHLAUTH rules.
- Block or map remote connections based on IP address, SSL subject, or MCAUSER.
- Establish channel authentication rules for granular access control.
- Audit and validate CHLAUTH configurations against established security policies.
LDAP Authorization on Distributed Platforms
- Connect queue managers to LDAP directories using AUTHINFO objects.
- Map LDAP groups to IBM MQ permissions with setmqaut.
- Configure authorization policies for users and applications.
- Manage authentication information objects and connection refresh settings.
TLS/SSL Certificate Management
- Create and manage CMS and PKCS12 key databases using runmqakm and runmqktool.
- Generate self-signed and CA-signed certificates for queue managers and channels.
- Configure SSLCIPH and SSLPEER settings on sender and receiver channels.
- Perform certificate renewal, revocation, and rotation with minimal downtime.
Clustering Architecture and Design
- Distinguish between full repository and partial repository queue managers.
- Build and maintain cluster channels (CLUSSDR and CLUSRCVR) and cluster queues.
- Design scalable cluster topologies suitable for production workloads.
- Implement overlapping clusters and gateway queue managers for multi-site routing.
Cluster Workload Balancing and Advanced Routing
- Configure cluster workload algorithms and priorities using CLWLWGHT.
- Utilize CLWLUSEQ and CLWLRANK for targeted message distribution.
- Perform manual and automatic workload rebalancing across cluster members.
- Troubleshoot cluster channel failures and naming conflicts.
High Availability with Multi-Instance Queue Managers
- Plan architecture and shared file system requirements for multi-instance queue managers.
- Configure active and standby queue manager instances on separate hosts.
- Test automatic failover and configure automatic client reconnection mechanisms.
- Monitor instance health and recover failed standby instances.
Replicated Data Queue Managers (RDQM)
- Understand RDQM architecture and its disaster recovery benefits.
- Create and manage replicated queue managers across multiple nodes.
- Execute failover scenarios and recovery procedures using rdqmadm.
- Tune network and storage settings to optimize RDQM replication performance.
REST API Administration
- Enable and secure the IBM MQ REST API on the mqweb server.
- Create and delete queue managers via HTTP POST and DELETE requests.
- Manage queues and channels using REST endpoints with JSON payloads.
- Automate administrative tasks with Python or curl REST clients.
IBM MQ Console Administration
- Install and configure the IBM MQ Console on the mqweb server.
- Manage queue managers, queues, and channels through the web interface.
- Configure role-based access and user authentication with mqwebuser.xml.
- Monitor dashboards and set alert thresholds for queue depth and channel status.
Advanced Message Security
- Configure AMS policies for message signing and encryption using setmqsp.
- Set up keystore files and certificates for Advanced Message Security interceptors.
- Enable end-to-end payload protection between publishers and subscribers.
- Diagnose AMS policy errors and keystore misconfigurations using error logs.
Publish/Subscribe Security
- Secure topic hierarchies with administrative topics and topic access controls.
- Control subscriber and publisher access with setmqaut on topic objects.
- Use topic aliases and proxy subscriptions for namespace isolation.
- Audit pub/sub activity and investigate access violation errors.
PCF Command Automation
- Understand PCF command and response message structures.
- Automate queue manager tasks with PCF programs and the MQ AI.
- Use the MQ Command Server and configure model reply queues.
- Build custom administration scripts with PCF to replace runmqsc for bulk changes.
Performance Monitoring and Tuning
- Tune buffer pools and page sets for optimal queue manager memory usage.
- Adjust channel tuning parameters to reduce throughput latency.
- Configure queue monitoring and queue depth events using event queues.
- Utilize amqsmon and MQ statistics to identify performance bottlenecks.
Troubleshooting Tools and Techniques
- Read and interpret error logs, FDC files, and FFST reports.
- Configure and analyze channel traces and API exits for problem diagnosis.
- Use dspmqrte to trace message routing through queue managers and clusters.
- Identify common failure patterns and apply targeted recovery steps.
Recent Updates and Modern Practices
- Select between IBM MQ 9.4 Continuous Delivery and Long Term Support based on operational requirements.
- Apply new security defaults, including TLS 1.2 minimum protocols and strengthened CHLAUTH rules.
- Deploy queue managers in containers and integrate with IBM Cloud Pak for Integration.
- Leverage recent REST API and MQ Console enhancements for automated administration.
Requirements
- A solid understanding of IBM MQ fundamentals, including queue managers, queues, channels, and messages.
- Practical experience with distributed operating systems such as Linux, Windows, or AIX.
- Familiarity with networking concepts and TLS/SSL certificates.
Audience
- System administrators.
- MQ administrators.
- DevOps engineers responsible for messaging infrastructure.
Testimonials (4)
The instructor was knowledgeable about the course topic and also other related topics, and was able to answer our questions, or even make a note of questions he didn't immediately know the answer to and got back to use later.
Abe Sabbagh - Enbridge
Course - Advanced RabbitMQ - 2 Days
Possibility to perform independent exercises in the training environment.
Tomasz - PKO Zycie Towarzystwo Ubezpieczen S.A.
Course - Kafka for Administrators
the technical preparation of teachers
Giorgio - Asystel-BDF S.p.A.
Course - Creating a Service Mesh with Istio and Kubernetes
Very practical examples. The trainer has tried to keep a pace where everybody is able to go with even though the group was quite inhomogeneous regarding the knowhow. He has provided a lot of support to basically everybody who asked for it :)