Course Outline
Advanced Queue Manager Configuration
- Establishing custom startup and shutdown procedures for queue managers using strmqm and endmqm.
- Configuring alias queues and dead letter queues to facilitate complex message routing.
- Developing and registering message exits and channel exits for custom processing logic.
- Setting up advanced LU62 and TCP listener configurations featuring custom port ranges.
Channel Authentication with CHLAUTH
- Managing and creating CHLAUTH records using SET CHLAUTH rules.
- Blocking or mapping remote connections based on MCAUSER, SSL subject, or IP address.
- Establishing channel authentication rules to enable granular access control.
- Validating and auditing CHLAUTH configurations to ensure compliance with security policies.
LDAP Authorization on Distributed Platforms
- Connecting queue managers to LDAP directories through AUTHINFO objects.
- Mapping LDAP groups to IBM MQ permissions using setmqaut.
- Setting up authorization policies for applications and users.
- Managing connection refresh and authentication information objects.
TLS/SSL Certificate Management
- Creating and managing PKCS12 and CMS key databases using runmqakm and runmqktool.
- Generating CA-signed and self-signed certificates for channels and queue managers.
- Configuring SSLCIPH and SSLPEER on receiver and sender channels.
- Executing certificate rotation, revocation, and renewal with minimal downtime.
Clustering Architecture and Design
- Understanding the differences between full and partial repository queue managers.
- Building and maintaining cluster queues and cluster channels (CLUSRCVR and CLUSSDR).
- Designing scalable cluster topologies suited for production workloads.
- Implementing gateway queue managers and overlapping clusters for multi-site routing.
Cluster Workload Balancing and Advanced Routing
- Configuring priorities and cluster workload algorithms using CLWLWGHT.
- Utilizing CLWLUSEQ and CLWLRANK for targeted message distribution.
- Conducting automatic and manual workload rebalancing across cluster members.
- Troubleshooting naming conflicts and cluster channel failures.
High Availability with Multi-Instance Queue Managers
- Planning shared file system requirements and architecture for multi-instance queue managers.
- Configuring active and standby queue manager instances on distinct hosts.
- Testing automatic client reconnection and failover capabilities.
- Monitoring instance health and recovering failed standby instances.
Replicated Data Queue Managers (RDQM)
- Comprehending RDQM architecture and its disaster recovery advantages.
- Creating and managing replicated queue managers across multiple nodes.
- Executing recovery procedures and failover scenarios with rdqmadm.
- Tuning storage and network settings to optimize RDQM replication performance.
REST API Administration
- Enabling and securing the IBM MQ REST API on the mqweb server.
- Creating and deleting queue managers via HTTP DELETE and POST requests.
- Managing channels and queues using REST endpoints with JSON payloads.
- Automating administrative tasks using curl or Python REST clients.
IBM MQ Console Administration
- Installing and configuring the IBM MQ Console on the mqweb server.
- Managing channels, queues, and queue managers through the web interface.
- Configuring user authentication and role-based access via mqwebuser.xml.
- Monitoring dashboards and setting alert thresholds for channel status and queue depth.
Advanced Message Security
- Configuring AMS policies for message encryption and signing using setmqsp.
- Setting up keystore files and certificates for Advanced Message Security interceptors.
- Enabling end-to-end payload protection between subscribers and publishers.
- Diagnosing keystore misconfigurations and AMS policy errors using error logs.
Publish/Subscribe Security
- Securing topic hierarchies with topic access controls and administrative topics.
- Controlling publisher and subscriber access via setmqaut on topic objects.
- Utilizing proxy subscriptions and topic aliases for namespace isolation.
- Auditing pub/sub activity and investigating access violation errors.
PCF Command Automation
- Understanding PCF command and response message structures.
- Automating queue manager tasks with PCF programs and the MQ API.
- Configuring model reply queues and utilizing the MQ Command Server.
- Building custom administration scripts with PCF to replace runmqsc for bulk changes.
Performance Monitoring and Tuning
- Adjusting page sets and buffer pools for optimal queue manager memory usage.
- Modifying channel tuning parameters to reduce latency and improve throughput.
- Configuring queue depth events and queue monitoring using event queues.
- Identifying performance bottlenecks using MQ statistics and amqsmon.
Troubleshooting Tools and Techniques
- Interpreting and reading FFST reports, FDC files, and error logs.
- Configuring and analyzing API exits and channel traces for problem diagnosis.
- Utilizing dspmqrte to trace message routing through clusters and queue managers.
- Identifying common failure patterns and applying targeted recovery steps.
Recent Updates and Modern Practices
- Selecting between IBM MQ 9.4 Long Term Support and Continuous Delivery based on operational needs.
- Applying new security defaults, including strengthened CHLAUTH rules and TLS 1.2 minimum protocols.
- Deploying queue managers in containers and integrating with IBM Cloud Pak for Integration.
- Leveraging recent MQ Console and REST API enhancements for automated administration.
Requirements
- A solid grasp of IBM MQ fundamentals, including queues, channels, queue managers, and messages.
- Practical experience with distributed operating systems such as Windows, Linux, or AIX.
- Familiarity with networking principles and TLS/SSL certificates.
Target Audience
- MQ administrators
- System administrators
- DevOps engineers tasked with managing messaging infrastructure
Testimonials (3)
Possibility to perform independent exercises in the training environment.
Tomasz - PKO Zycie Towarzystwo Ubezpieczen S.A.
Course - Kafka for Administrators
the technical preparation of teachers
Giorgio - Asystel-BDF S.p.A.
Course - Creating a Service Mesh with Istio and Kubernetes
The knowledge provided covered all aspects that we could need for our current apache camel implementations.