Course Outline
Advanced Queue Manager Configuration
- Implementing custom startup and shutdown procedures for queue managers using strmqm and endmqm.
- Configuring dead letter queues and alias queues to facilitate complex message routing.
- Developing and registering channel exits and message exits for specialized processing needs.
- Setting up advanced TCP and LU62 listener configurations with specific port ranges.
Channel Authentication with CHLAUTH
- Creating and managing CHLAUTH records using SET CHLAUTH commands.
- Blocking or mapping remote connections based on IP address, SSL subject, or MCAUSER.
- Establishing granular channel authentication rules for precise access control.
- Auditing and validating CHLAUTH configurations to ensure alignment with security policies.
LDAP Authorization on Distributed Platforms
- Connecting queue managers to LDAP directories via AUTHINFO objects.
- Mapping LDAP groups to IBM MQ permissions using setmqaut.
- Configuring authorization policies for users and applications.
- Managing authentication information objects and handling connection refresh processes.
TLS/SSL Certificate Management
- Creating and managing CMS and PKCS12 key databases using runmqakm and runmqktool.
- Generating self-signed and CA-signed certificates for queue managers and channels.
- Configuring SSLCIPH and SSLPEER parameters on sender and receiver channels.
- Performing certificate renewal, revocation, and rotation with minimal service disruption.
Clustering Architecture and Design
- Distinguishing between full repository and partial repository queue managers.
- Building and maintaining cluster channels (CLUSSDR and CLUSRCVR) along with cluster queues.
- Designing scalable cluster topologies suitable for production workloads.
- Implementing overlapping clusters and gateway queue managers for multi-site routing.
Cluster Workload Balancing and Advanced Routing
- Configuring cluster workload algorithms and priorities using CLWLWGHT.
- Utilizing CLWLUSEQ and CLWLRANK for targeted message distribution.
- Executing manual and automatic workload rebalancing across cluster members.
- Troubleshooting cluster channel failures and resolving naming conflicts.
High Availability with Multi-Instance Queue Managers
- Planning the architecture and shared file system requirements for multi-instance queue managers.
- Configuring active and standby queue manager instances on separate hosts.
- Testing automatic failover mechanisms and configuring automatic client reconnection.
- Monitoring instance health and recovering failed standby instances.
Replicated Data Queue Managers (RDQM)
- Understanding RDQM architecture and its disaster recovery benefits.
- Creating and managing replicated queue managers across multiple nodes.
- Executing failover scenarios and recovery procedures using rdqmadm.
- Tuning network and storage settings to optimize RDQM replication performance.
REST API Administration
- Enabling and securing the IBM MQ REST API on the mqweb server.
- Creating and deleting queue managers via HTTP POST and DELETE requests.
- Managing queues and channels using REST endpoints with JSON payloads.
- Automating administrative tasks through Python or curl REST clients.
IBM MQ Console Administration
- Installing and configuring the IBM MQ Console on the mqweb server.
- Managing queue managers, queues, and channels through the web interface.
- Configuring role-based access and user authentication using mqwebuser.xml.
- Monitoring dashboards and setting alert thresholds for queue depth and channel status.
Advanced Message Security
- Configuring AMS policies for message signing and encryption with setmqsp.
- Setting up keystore files and certificates for Advanced Message Security interceptors.
- Enabling end-to-end payload protection between publishers and subscribers.
- Diagnosing AMS policy errors and keystore misconfigurations using error logs.
Publish/Subscribe Security
- Securing topic hierarchies with administrative topics and topic access controls.
- Controlling subscriber and publisher access with setmqaut on topic objects.
- Utilizing topic aliases and proxy subscriptions for namespace isolation.
- Auditing pub/sub activity and investigating access violation errors.
PCF Command Automation
- Understanding PCF command and response message structures.
- Automating queue manager tasks using PCF programs and the MQ API.
- Utilizing the MQ Command Server and configuring model reply queues.
- Building custom administration scripts with PCF to replace runmqsc for bulk changes.
Performance Monitoring and Tuning
- Tuning buffer pools and page sets for optimal queue manager memory usage.
- Adjusting channel tuning parameters to reduce throughput latency.
- Configuring queue monitoring and queue depth events using event queues.
- Using amqsmon and MQ statistics to identify performance bottlenecks.
Troubleshooting Tools and Techniques
- Reading and interpreting error logs, FDC files, and FFST reports.
- Configuring and analyzing channel traces and API exits for problem diagnosis.
- Using dspmqrte to trace message routing through queue managers and clusters.
- Identifying common failure patterns and applying targeted recovery steps.
Recent Updates and Modern Practices
- Selecting between IBM MQ 9.4 Continuous Delivery and Long Term Support based on operational needs.
- Applying new security defaults, including minimum TLS 1.2 protocols and strengthened CHLAUTH rules.
- Deploying queue managers in containers and integrating with IBM Cloud Pak for Integration.
- Leveraging recent REST API and MQ Console enhancements for automated administration.
Requirements
- A solid grasp of IBM MQ fundamentals, including queue managers, queues, channels, and messages.
- Hands-on experience with distributed operating systems such as Linux, Windows, or AIX.
- Familiarity with networking concepts and TLS/SSL certificate management.
Audience
- System administrators
- MQ administrators
- DevOps engineers tasked with messaging infrastructure
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 8000 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (4)
The instructor was knowledgeable about the course topic and also other related topics, and was able to answer our questions, or even make a note of questions he didn't immediately know the answer to and got back to use later.
Abe Sabbagh - Enbridge
Course - Advanced RabbitMQ - 2 Days
Possibility to perform independent exercises in the training environment.
Tomasz - PKO Zycie Towarzystwo Ubezpieczen S.A.
Course - Kafka for Administrators
the technical preparation of teachers
Giorgio - Asystel-BDF S.p.A.
Course - Creating a Service Mesh with Istio and Kubernetes
Very practical examples. The trainer has tried to keep a pace where everybody is able to go with even though the group was quite inhomogeneous regarding the knowhow. He has provided a lot of support to basically everybody who asked for it :)
