Course Outline
Advanced Queue Manager Configuration
- Implementing custom startup and shutdown sequences using strmqm and endmqm
- Configuring dead letter and alias queues to facilitate complex message routing
- Developing and registering channel and message exits for specialized processing
- Establishing advanced TCP and LU62 listener configurations with custom port assignments
Channel Authentication via CHLAUTH
- Generating and managing CHLAUTH records using SET CHLAUTH directives
- Restricting or mapping remote connections based on IP address, SSL subject, or MCAUSER
- Defining channel authentication rules to enforce granular access controls
- Auditing and validating CHLAUTH settings against established security policies
LDAP Authorization on Distributed Systems
- Integrating queue managers with LDAP directories through AUTHINFO objects
- Associating LDAP groups with IBM MQ permissions utilizing setmqaut
- Establishing authorization frameworks for users and application entities
- Overseeing authentication information objects and connection refresh cycles
TLS/SSL Certificate Administration
- Creating and managing CMS and PKCS12 key databases using runmqakm and runmqktool
- Generating self-signed and CA-signed certificates for queue managers and channels
- Configuring SSLCIPH and SSLPEER parameters on sender and receiver channels
- Executing certificate renewal, revocation, and rotation processes with minimal operational disruption
Clustering Architecture and Design
- Differentiating between full repository and partial repository queue managers
- Constructing and maintaining cluster channels (CLUSSDR and CLUSRCVR) and cluster queues
- Designing scalable cluster topologies to support production workloads
- Implementing overlapping clusters and gateway queue managers for multi-site routing
Cluster Workload Balancing and Advanced Routing
- Configuring cluster workload algorithms and prioritization using CLWLWGHT
- Utilizing CLWLUSEQ and CLWLRANK for precise message distribution
- Performing manual and automated workload rebalancing across cluster members
- Troubleshooting cluster channel failures and resolving naming conflicts
High Availability via Multi-Instance Queue Managers
- Planning architectural requirements and shared file system specifications for multi-instance deployments
- Configuring active and standby queue manager instances across separate hosts
- Testing automatic failover mechanisms and configuring client reconnection logic
- Monitoring instance health and executing recovery procedures for failed standby instances
Replicated Data Queue Managers (RDQM)
- Understanding RDQM architecture and its benefits for disaster recovery
- Creating and managing replicated queue managers across multiple nodes
- Executing failover scenarios and recovery procedures using rdqmadm
- Optimizing network and storage configurations for RDQM replication performance
REST API Administration
- Enabling and securing the IBM MQ REST API on the mqweb server
- Creating and removing queue managers via HTTP POST and DELETE requests
- Managing queues and channels using REST endpoints with JSON payloads
- Automating administrative tasks using Python or curl REST clients
IBM MQ Console Administration
- Installing and configuring the IBM MQ Console on the mqweb server
- Managing queue managers, queues, and channels through the web interface
- Configuring role-based access and user authentication via mqwebuser.xml
- Monitoring dashboards and establishing alert thresholds for queue depth and channel status
Advanced Message Security
- Configuring AMS policies for message signing and encryption using setmqsp
- Setting up keystore files and certificates for Advanced Message Security interceptors
- Enabling end-to-end payload protection between publishers and subscribers
- Diagnosing AMS policy errors and keystore misconfigurations using error logs
Publish/Subscribe Security
- Securing topic hierarchies with administrative topics and topic access controls
- Controlling subscriber and publisher access using setmqaut on topic objects
- Utilizing topic aliases and proxy subscriptions for namespace isolation
- Auditing pub/sub activity and investigating access violation errors
PCF Command Automation
- Understanding PCF command and response message structures
- Automating queue manager tasks with PCF programs and the MQ AI
- Using the MQ Command Server and configuring model reply queues
- Building custom administration scripts with PCF to replace runmqsc for bulk changes
Performance Monitoring and Tuning
- Tuning buffer pools and page sets for optimal queue manager memory usage
- Adjusting channel tuning parameters for throughput and latency reduction
- Configuring queue monitoring and queue depth events with event queues
- Using amqsmon and MQ statistics to identify performance bottlenecks
Troubleshooting Tools and Techniques
- Reading and interpreting error logs, FDC files, and FFST reports
- Configuring and analyzing channel traces and API exits for problem diagnosis
- Using dspmqrte to trace message routing through queue managers and clusters
- Identifying common failure patterns and applying targeted recovery steps
Recent Updates and Modern Practices
- Selecting between IBM MQ 9.4 Continuous Delivery and Long Term Support based on operational requirements
- Applying new security defaults including TLS 1.2 minimum protocols and strengthened CHLAUTH rules
- Deploying queue managers in containers and integrating with IBM Cloud Pak for Integration
- Leveraging recent REST API and MQ Console enhancements for automated administration
Requirements
- An understanding of IBM MQ fundamentals including queue managers, queues, channels, and messages
- Experience with distributed operating systems such as Linux, Windows, or AIX
- Familiarity with networking concepts and TLS/SSL certificates
Audience
- System administrators
- MQ administrators
- DevOps engineers responsible for messaging infrastructure
Testimonials (4)
The instructor was knowledgeable about the course topic and also other related topics, and was able to answer our questions, or even make a note of questions he didn't immediately know the answer to and got back to use later.
Abe Sabbagh - Enbridge
Course - Advanced RabbitMQ - 2 Days
Possibility to perform independent exercises in the training environment.
Tomasz - PKO Zycie Towarzystwo Ubezpieczen S.A.
Course - Kafka for Administrators
the technical preparation of teachers
Giorgio - Asystel-BDF S.p.A.
Course - Creating a Service Mesh with Istio and Kubernetes
Very practical examples. The trainer has tried to keep a pace where everybody is able to go with even though the group was quite inhomogeneous regarding the knowhow. He has provided a lot of support to basically everybody who asked for it :)