Course Outline
Advanced Queue Manager Configuration
- Implementing bespoke queue manager startup and shutdown workflows using strmqm and endmqm
- Configuring dead letter and alias queues to facilitate complex message routing
- Developing and registering channel and message exits for custom processing logic
- Establishing advanced TCP and LU62 listener configurations with specified port ranges
Channel Authentication via CHLAUTH
- Creating and administering CHLAUTH records using SET CHLAUTH rules
- Restricting or mapping remote connections based on IP address, SSL subject, or MCAUSER
- Defining channel authentication rules for fine-grained access control
- Auditing and verifying CHLAUTH configurations against established security policies
LDAP Authorization on Distributed Platforms
- Linking queue managers to LDAP directories through AUTHINFO objects
- Mapping LDAP groups to IBM MQ permissions using setmqaut
- Configuring authorization policies for specific users and applications
- Managing authentication information objects and connection refresh cycles
TLS/SSL Certificate Management
- Creating and maintaining CMS and PKCS12 key databases using runmqakm and runmqktool
- Generating self-signed and CA-signed certificates for queue managers and channels
- Configuring SSLCIPH and SSLPEER on sender and receiver channels
- Executing certificate renewal, revocation, and rotation with minimal operational downtime
Clustering Architecture and Design
- Distinguishing between full repository and partial repository queue managers
- Constructing and sustaining cluster channels (CLUSSDR and CLUSRCVR) and cluster queues
- Architecting scalable cluster topologies suitable for production workloads
- Implementing overlapping clusters and gateway queue managers for multi-site routing
Cluster Workload Balancing and Advanced Routing
- Configuring cluster workload algorithms and priorities using CLWLWGHT
- Utilizing CLWLUSEQ and CLWLRANK for precise message distribution
- Executing manual and automatic workload rebalancing across cluster members
- Diagnosing cluster channel failures and resolving naming conflicts
High Availability via Multi-Instance Queue Managers
- Planning architecture and shared file system requirements for multi-instance setups
- Configuring active and standby queue manager instances on distinct hosts
- Testing automatic failover and configuring automatic client reconnection
- Monitoring instance health and recovering failed standby instances
Replicated Data Queue Managers (RDQM)
- Comprehending RDQM architecture and its disaster recovery advantages
- Creating and administering replicated queue managers across multiple nodes
- Executing failover scenarios and recovery procedures using rdqmadm
- Optimizing network and storage settings for RDQM replication performance
REST API Administration
- Enabling and securing the IBM MQ REST API on the mqweb server
- Creating and deleting queue managers via HTTP POST and DELETE requests
- Managing queues and channels using REST endpoints with JSON payloads
- Automating administrative tasks using Python or curl REST clients
IBM MQ Console Administration
- Installing and configuring the IBM MQ Console on the mqweb server
- Managing queue managers, queues, and channels through the web interface
- Configuring role-based access and user authentication via mqwebuser.xml
- Monitoring dashboards and establishing alert thresholds for queue depth and channel status
Advanced Message Security
- Configuring AMS policies for message signing and encryption using setmqsp
- Setting up keystore files and certificates for Advanced Message Security interceptors
- Enabling end-to-end payload protection between publishers and subscribers
- Diagnosing AMS policy errors and keystore misconfigurations using error logs
Publish/Subscribe Security
- Securing topic hierarchies with administrative topics and topic access controls
- Controlling subscriber and publisher access using setmqaut on topic objects
- Utilizing topic aliases and proxy subscriptions for namespace isolation
- Auditing pub/sub activity and investigating access violation errors
PCF Command Automation
- Understanding PCF command and response message structures
- Automating queue manager tasks using PCF programs and the MQ AI
- Using the MQ Command Server and configuring model reply queues
- Building custom administration scripts with PCF to replace runmqsc for bulk changes
Performance Monitoring and Tuning
- Tuning buffer pools and page sets for optimal queue manager memory usage
- Adjusting channel tuning parameters for throughput and latency reduction
- Configuring queue monitoring and queue depth events with event queues
- Using amqsmon and MQ statistics to identify performance bottlenecks
Troubleshooting Tools and Techniques
- Reading and interpreting error logs, FDC files, and FFST reports
- Configuring and analyzing channel traces and API exits for problem diagnosis
- Using dspmqrte to trace message routing through queue managers and clusters
- Identifying common failure patterns and applying targeted recovery steps
Recent Updates and Modern Practices
- Selecting between IBM MQ 9.4 Continuous Delivery and Long Term Support based on operational requirements
- Applying new security defaults including TLS 1.2 minimum protocols and strengthened CHLAUTH rules
- Deploying queue managers in containers and integrating with IBM Cloud Pak for Integration
- Leveraging recent REST API and MQ Console enhancements for automated administration
Requirements
- A solid grasp of IBM MQ core concepts, including queue managers, queues, channels, and messages
- Practical experience with distributed operating systems such as Linux, Windows, or AIX
- Working knowledge of networking principles and TLS/SSL certificates
Target Audience
- System administrators
- MQ administrators
- DevOps engineers accountable for messaging infrastructure
Testimonials (4)
The instructor was knowledgeable about the course topic and also other related topics, and was able to answer our questions, or even make a note of questions he didn't immediately know the answer to and got back to use later.
Abe Sabbagh - Enbridge
Course - Advanced RabbitMQ - 2 Days
Possibility to perform independent exercises in the training environment.
Tomasz - PKO Zycie Towarzystwo Ubezpieczen S.A.
Course - Kafka for Administrators
the technical preparation of teachers
Giorgio - Asystel-BDF S.p.A.
Course - Creating a Service Mesh with Istio and Kubernetes
Very practical examples. The trainer has tried to keep a pace where everybody is able to go with even though the group was quite inhomogeneous regarding the knowhow. He has provided a lot of support to basically everybody who asked for it :)