SlideShare a Scribd company logo
1 of 57
Download to read offline
What’s new in IBM
MQ v9.1.x
RobParker
SoftwareEngineer,SecurityFocal
IBMMQDevelopment.
parrobe@uk.ibm.com
2
Please note:
IBM’s statements regarding its plans, directions, and intent are subject to change or withdrawal without notice at IBM’s
sole discretion.
Information regarding potential future products is intended to outline our general product direction and it should not be
relied on in making a purchasing decision.
The information mentioned regarding potential future products is not a commitment, promise, or legal obligation to
deliver any material, code or functionality. Information about potential future products may not be incorporated into any
contract.
The development, release, and timing of any future features or functionality described for our products remains at our
sole discretion.
Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The
actual throughput or performance that any user will experience will vary depending upon many factors, including
considerations such as the amount of multiprogramming in the user’s job stream, the I/O configuration, the storage
configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve
results similar to those stated here.
Mix and Match
Both are available under the
same license.
Both can interoperate, just
like any previous version of
MQ.
Continuous Delivery
New CD versions of MQ are
released approximately
every four months,
incrementally introducing
new product capabilities.
Intended for those that can
continually integrate.
Long Term Support
Approximately every two
years a new LTS version is
released, rolling up many of
the CD capabilities into a
release with 5+3 support
attached.
Required by those looking
for fixed function.
In 2016 MQ introduced
a dual Long Term
Support and a
Continuous Delivery
model
IBM MQ: long term support and continuous delivery
2017 2018
S V9.0.1 CD V9.0.2 CD V9.0.3 CD V9.0.4 CD V9.0.5 CD
liance MQ on IBM Cloud
2019 2020
V9.1 LTS V9.1.1 CD V9.1.2 CD V9.1.3 CD V9.1.4 CD
© 2019 IBM Corporation
available
3
…
soon
4
MQ 9.1.X CD Content So Far
Uniform Cluster
automatic
application
rebalancing
Automatic TLS
CipherSpec
negotiation
Client connectivity
with zCEE
Microsoft .NET
Core support
Developer toolkit
for MacOS
Enhanced
Salesforce Bridge
Full JSON-syntax
REST
administration
Permitted TLS
CipherSpec
control
REST messaging
performance
enhancements
JSON format
CCDT
MQ Appliance HA
event
notifications
WebSphere
Liberty MDB
pause
ini file and MQSC
injection at
startup
Escalating end
queue manager
MQFT REST list
resource monitors
New consistent
MQ samples
New application
status checking
Channel enabled
AMS policies for
z/OS
Browse messages
using REST
Build toolkit for
zCEE
Idempotent
MQSC commands
Rapid Uniform
Cluster
rebalancing
Improved
distributed queue
manager restart
times
Stream MQ
Appliance error
logs
Enhanced
Blockchain Bridge
MFT REST create
file transfer
FTP server
support on IBM I
for MFT
Highly available
MFT Agent
deployments
Automatic Cluster
configuration
Packaged MQ
Internet Passthru
(IPT)
XA support in
Liberty for
decoupled JMS
connections
z/OS data set
encryption
support
MQ Appliance
admin activity
audit logging
TLS 1.3 support
User controlled
application
naming
MQIPT
HSM Support
Introducing the new z15
Providing next level resiliency and data privacy to hybrid cloud infrastructures
Up to 190 GPs, 40TB RAM
25% more capacity than z14 in same data centre footprint!
Make the most of z15 with MQ for z/OS
Data Protection
& Privacy
Protected data within IBM Z
• MQ supports z/OS data set encryption as
part of a pervasive encryption strategy
End-to-end data protection
• MQ Advanced Message Security secures
data throughout the messaging network,
protecting against external and internal
security threats
Enhanced encryption performance
• Crypto Express7S and CPACF
acceleration reduces cost of MQ channel
and message level encryption
Business Continuity
& Resiliency
Workload restart and recovery
• MQ benefits automatically from System
Recovery Boost, speeding queue manager
restarts and workload catchup
Service and data high availability
• MQ Queue Sharing Groups exploit the
resiliency of IBM Z hardware, providing
truly active-active messaging
Embedded operational data and analytics
• MQ SMF data provides KPIs that can feed
the diagnostic and analytic capabilities of
z15
Cloud Integration
Cloud workloads & management
• MQ runs within z/OS Container Extensions
to provide cloud applications with a
connectivity gateway to the mainframe
• MQ provides z/OSMF templates for self
service provisioning of queue managers
and queues via z/OS Cloud Broker
Cloud Native
• Cloud applications can easily access MQ
resources via the MQ service provider for
z/OS Connect with build toolkit support to
automate DevOps pipelines
• MQ REST APIs, web console and CLI
available within Zowe framework
Standardized & Flexible for the Cloud Data Center
Modular and Scalable
1-4 frames depending on capacity
requirements
Industry Standard
19” Form Factor with choice of
power and cooling
On-Chip Acceleration
Compression accelerator reduces cost
of messages over MQ channels and storage
for persistent messages 8
z/OS Container Extensions
New with z/OS 2.4, zCX allows you to run zLinux
applications in a Docker container directly on a
z/OS LPAR
Application developers can develop, and data
centers can operate, popular open source
packages, Linux applications, IBM software, and
third-party software together with z/OS
applications and data
Can run on zIIP, no need for IFL
Can exploit HyperSockets
Some interesting MQ options:
• Client concentrator
• Cluster full repository
http://www.redbooks.ibm.com/abstracts/sg248457.html
z/OS LPAR
zCX
MQ on zLinux
MQ on z/OS
MQ on z/OS
App
App
App
App
App
App Sender
receiver
channels
zHyperSockets
MQ running as client concentrator in zCX
10
Enhancements to the
administrative REST
API
11
New and updated JSON MQSC options
Support has been added for the DISPLAY CONN MQSC commands
QM1
IBM MQ
Console
{
"type": "runCommandJSON",
"command": ”display",
"qualifier": ”conn",
"name": ”*",
"parameters": {
”type": “HANDLE”
}
}
12
New and updated JSON MQSC options
Single quotation marks no longer need to be escaped
QM1
IBM MQ
Console
{
"type": "runCommandJSON",
"command": ”define",
"qualifier": ”qlocal",
"name": ”QL",
"parameters": {
"descr" : "single 'quotation' marks”
}
}
13
New and updated JSON MQSC options
SET POLICY has been updated to support a JSON array of signers or recipients
QM1
IBM MQ
Console
{
"type": "runCommandJSON",
"command": "set",
"qualifier": "policy",
"name": "POL.Q1",
"parameters": {
"signer": ["CN=Alice", "CN=Bob"],
"recip": ["CN=User1"],
"encalg": "RC2",
"signalg": "SHA256"
}
}
14
Better HTTP return codes for REST MQSC
QM1
IBM MQ
Console
HTTP: 200
{
"type": "runCommandJSON",
"command": "define",
"qualifier": "qolcal",
"name": "Q1",
"parameters": {
"descr": "A test queue"
}
}
{ "commandResponse": [ {
"completionCode": 2, "message": [
"AMQ8426I: Valid MQSC commands
are" ], "reasonCode": 10 } ],
"overallCompletionCode": 2,
"overallReasonCode": 10 }
15
Better HTTP return codes for REST MQSC
QM1
IBM MQ
Console
HTTP: 400
{
"type": "runCommandJSON",
"command": "define",
"qualifier": "qolcal",
"name": "Q1",
"parameters": {
"descr": "A test queue"
}
}
{ "commandResponse": [ {
"completionCode": 2, "message": [
"AMQ8426I: Valid MQSC commands
are" ], "reasonCode": 10 } ],
"overallCompletionCode": 2,
"overallReasonCode": 10 }
16
Managed File Transfer REST API changes
QM1
IBM MQ
Console
POST
MFT Resource
Monitor
MFT Agent
DELETE
• POST and DELETE calls can be used to managed MFT Resource Monitors
• MQWebUser role can now be used to authenticate users
17
Replicated Data Queue
Managers
IBM MQ Advanced 9.1 LTS
RHEL x86
MQ HA Group
Node 2 Node 3Node 1
Replicated Data Queue Managers App
Network
App App
MQ Advanced for RHEL x86-64
18
© 2019 IBM Corporation
Linux only, MQ Advanced HA solution with no need
for a shared file system or HA cluster
Three-way replication and monitoring for quorum
support
Synchronous data replication for once and once
only transactional delivery of messages
Active/passive queue managers with automatic
takeover
Per queue manager control to support active/active
utilisation of nodes
MQ licensing is aligned to maximise benefits
IBM MQ 9.1.1+ CDImprovements in restart times
19
© 2019 IBM Corporation
Sub-second queue manager restarts under load*
are now possible
In 9.1.4 new ability to set a time limit on how long
a queue manager takes to shut down
endmqm MQ1 –t 5
Shuts queue manager down with a target time of 5
seconds. Essential queue manager tasks are allowed
to complete. There is a tp variant which is more
aggressive
V9.1.0.2 Multi-instance queue manager
V9.1.0.2 Replicated data queue manager
V9.1.2 Multi-instance queue manager
V9.1.2 Replicated data queue manager
Operator instigated switch over Abrupt failover
*500 connected applications, driving
50k-85k msgs/sec
IBM MQ Advanced 9.1 LTS
RHEL x86
Node 2Node 1
data replication
Replicated Data Queue Managers App
Manual failover
RDQM also supports a looser coupled pair of nodes
for data replication but with no automatic failover,
often for Disaster Recovery
Data replication can be
Asynchronous for systems separated by a high
latency network
Synchronous for systems on a low latency
network
© 2019 IBM Corporation
20MQ Advanced for RHEL x86-64
IBM MQ Advanced ???
RHEL x86
Statement of direction
Enhancements to replicated data queue manager
functions in MQ Advanced that will enable the
synchronous replication of data for a three-way,
high-availability configuration and simultaneous
asynchronous replication of data to another three-
way, high-availability configuration for disaster
recovery
© 2019 IBM Corporation
MQ Advanced for RHEL x86-64
22
Uniform Clusters
Building scalable, fault tolerant, solutions
Many of you have built your own continuously
available and horizontally scalable solutions over
the years
Let’s call this the “uniform cluster” pattern
MQ has provided you many of the building blocks -
Client auto-reconnect
CCDT queue manager groups
But you’re left to solve some of the problems,
particularly with long running applications -
Efficiently distributing your applications
Ensuring all messages are processed
Maintaining availability during maintenance
Handling growth and contraction of scale
App App App
decoupled
AppApp
© 2019 IBM Corporation23
Uniform Cluster
© 2019 IBM Corporation24
MQ 9.1.2 started to make that easier
For the distributed platforms, declare a set of
matching queue managers to be following the
uniform cluster pattern
All members of an MQ Cluster
Matching queues are defined on every queue manager
Applications can connect as clients to every queue
manager
MQ will automatically share application
connectivity knowledge between queue managers
The group will use this knowledge to automatically
keep matching application instances balanced
across the queue managers
Matching applications are based on application name
(new abilities to programmatically define this)
MQ is incrementally rolling out the client support
for this through the CD releases
IBM MQ 9.1.2+ CD
Application awareness
Application awareness
© 2019 IBM Corporation25
App App
Automatic application balancing
Application instances can initially connect to any member of
the group
We recommend you use a queue manager group and
CCDT to remove any SPoF
Every member of the uniform cluster will detect an
imbalance and request other queue managers to donate
their applications
Hosting queue managers will instigate a client auto-
reconnect with instructions of where to reconnect to
Applications that have enabled auto-reconnect will
automatically move their connection to the indicated queue
manager
9.1.2 CD added support for C-based applications
9.1.3 CD has added JMS SE support
9.1.4 CD adds .NET and XMS .NET support and speeds
up the rebalancing process
App App App App
IBM MQ 9.1.X CD
Uniform cluster administration
© 2019 IBM Corporation
Uniform Cluster
TuningParameters:
UniformClusterName=<MQ_CLUSTER_NAME>
ALTER QMGR REPOS(….
DEFINE CHANNEL(…..
DEFINE CHANNEL(…..
DEFINE QLOCAL(….
….
TuningParameters:
UniformClusterName=<MQ_CLUSTER_NAME>
TuningParameters:
UniformClusterName=<MQ_CLUSTER_NAME>
ALTER QMGR REPOS(….
DEFINE CHANNEL(…..
DEFINE CHANNEL(…..
DEFINE QLOCAL(….
….
ALTER QMGR REPOS(….
DEFINE CHANNEL(…..
DEFINE CHANNEL(…..
DEFINE QLOCAL(….
….
configure configure configure
Uniform clusters currently leave the
uniformity to you
IBM MQ 9.1.2 CD
Uniform Cluster
Uniform cluster administration
© 2019 IBM Corporation
Push one set of configuration into each
queue manager in the uniform cluster
This will also add the concept of deploy
time configuration to distributed MQ
Create/start time ini and MQSC configuration
ingestion
Extended insert expansion support
AutoCluster:
Type=Uniform
ClusterName=UNIDEMO
DEFINE CHANNEL(…..
DEFINE QLOCAL(….
….
deploy
IBM MQ 9.1.4 CD
28
Simplified setup for Uniform clusters
TuningParameters:
UniformClusterName=UNIDEMO
AutoCluster:
Type=Uniform
ClusterName=UNIDEMO
The mechanism for creating a Uniform Cluster has changed:
• New Dedicated qm.ini Stanza and attributes.
IBM MQ 9.1.2 CD IBM MQ 9.1.4 CD
A short break
30
Security
Improvements
© 2019 IBM Corporation31
Managing channel CipherSpecs
Making it easier to keep up-to-date with ever
changing ciphers, simplifying migration
Rather than needing to match the CipherSpec on
both ends of a channel, MQ 9.1.1 CD (all
platforms) introduced ANY_TLS12 and MQ will
negotiate the strongest CipherSpec available to
both ends
For 9.1.1, the distributed platforms also added
the ability to whitelist exactly which CipherSpecs
a queue manager will accept
CipherSpec A
CipherSpec ANY CipherSpec ANY
CipherSpec A
IBM MQ 9.1.1 CD
32
In 9.1.1 we added capability to provide a custom list of support CipherSpecs:
• Can be used to re-enable deprecated CipherSpecs
• Can be used to disable CipherSpecs not allowed by company policy.
Controlling enabled Ciphers
QM1
SSL:
AllowedCipherSpecs=ECDHE_ECDSA_AES_128_CBC_SHA256,
ECDHE_RSA_AES_256_CBC_SHA384,
…
33
TLS 1.3 Support
TLS 1.3 communication is available in:
• Queue Manager to Queue Manager communications
• C Clients with local bindings
• C Clients with network connections
Support for 5 new TLS 1.3 CipherSpecs
Ability to enable/disable TLS 1.3
TLS 1.3 support is dependant on the cryptographic provider
QM1 QM2
C Clients .NET / XMSJava/JMS
Planned for a future update
In future continuous delivery (CD) releases, IBM intends to deliver MQ for z/OS support for the TLS
1.3 cryptographic protocol where it is available by the z/OS operating system
34
New Alias CipherSpecs
4 new Alias CipherSpecs:
• ANY
• ANY_TLS13
• ANY_TLS12_OR_HIGHER
• ANY_TLS13_OR_HIGHER
Allows automatic support of new Ciphers in higher protocol
versions.
Recommended to set on the server and use Client for fine
grained control:
e.g. ANY set on SVRCONN CHANNEL.
TLS_RSA_WITH_AES_128_CBC_SHA256 set on Client.
TLS 1.0 Cipher
TLS 1.2 Cipher 1
TLS 1.2 Cipher 2
TLS 1.3 Cipher 1
TLS 1.3 Cipher 2
… Future Ciphers …
ANY
ANY_TLS13
ANY_TLS12_OR_HIGHER
ANY_TLS13_OR_HIGHER
ANY_TLS12
35
New Alias CipherSpecs
4 new Alias CipherSpecs:
• ANY
• ANY_TLS13
• ANY_TLS12_OR_HIGHER
• ANY_TLS13_OR_HIGHER
Allows automatic support of new Ciphers in higher protocol
versions.
Recommended to set on the server and use Client for fine
grained control:
e.g. ANY set on SVRCONN CHANNEL.
TLS_RSA_WITH_AES_128_CBC_SHA256 set on Client.
TLS 1.0 Cipher
TLS 1.2 Cipher 1
TLS 1.2 Cipher 2
TLS 1.3 Cipher 1
TLS 1.3 Cipher 2
… Future Ciphers …
ANY
ANY_TLS13
ANY_TLS12_OR_HIGHER
ANY_TLS13_OR_HIGHER
ANY_TLS12
36
New Alias CipherSpecs
4 new Alias CipherSpecs:
• ANY
• ANY_TLS13
• ANY_TLS12_OR_HIGHER
• ANY_TLS13_OR_HIGHER
Allows automatic support of new Ciphers in higher protocol
versions.
Recommended to set on the server and use Client for fine
grained control:
e.g. ANY set on SVRCONN CHANNEL.
TLS_RSA_WITH_AES_128_CBC_SHA256 set on Client.
TLS 1.0 Cipher
TLS 1.2 Cipher 1
TLS 1.2 Cipher 2
TLS 1.3 Cipher 1
TLS 1.3 Cipher 2
… Future Ciphers …
ANY
ANY_TLS13
ANY_TLS12_OR_HIGHER
ANY_TLS13_OR_HIGHER
ANY_TLS12
37
New Alias CipherSpecs
4 new Alias CipherSpecs:
• ANY
• ANY_TLS13
• ANY_TLS12_OR_HIGHER
• ANY_TLS13_OR_HIGHER
Allows automatic support of new Ciphers in higher protocol
versions.
Recommended to set on the server and use Client for fine
grained control:
e.g. ANY set on SVRCONN CHANNEL.
TLS_RSA_WITH_AES_128_CBC_SHA256 set on Client.
TLS 1.0 Cipher
TLS 1.2 Cipher 1
TLS 1.2 Cipher 2
TLS 1.3 Cipher 1
TLS 1.3 Cipher 2
… Future Ciphers …
ANY
ANY_TLS13
ANY_TLS12_OR_HIGHER
ANY_TLS13_OR_HIGHER
ANY_TLS12
38
TLS Handshake Transcript
GSKit can be asked to provide a transcript of a TLS handshake
• We will write this to trace:
• Only written if trace is running
• {Default} Only if TLS Handshake fails
• Output to the amqrmppa or client application trace.
QM1QM
C Clients
TLS Handshake
Handshake
transcript
Handshake
transcript
© 2019 IBM Corporation40
Advanced Message Security
End-to-end application-to-application encryption
may give you the highest level of security, but it’s
not always possible to use. For example, where
the applications are not AMS enabled or where
the originators or recipients of the messages are
outside of your domain
encrypted
Application to application
App App
© 2019 IBM Corporation41
Advanced Message Security
End-to-end application-to-application encryption
may give you the highest level of security, but it’s
not always possible to use. For example, where
the applications are not AMS enabled or where
the originators or recipients of the messages are
outside of your domain
MQ on Distributed has always had client level
interception to apply AMS policies once messages
reach or leave their first queue manager
encrypted
Queue manager entry
App App
© 2019 IBM Corporation42
Advanced Message Security
End-to-end application-to-application encryption
may give you the highest level of security, but it’s
not always possible to use. For example, where
the applications are not AMS enabled or where
the originators or recipients of the messages are
outside of your domain
MQ on Distributed has always had client level
interception to apply AMS policies once messages
reach or leave their first queue manager
MQ 9.1.3 on z/OS adds the ability to apply those
policies at a queue manager-to-queue manager
boundary. This enables the use of AMS within one
domain without affecting another
There is a statement of direction for adding this
function on distributed platforms
IBM MQ Advanced 9.1.3 CD
z/OS
encrypted
Organizational boundary
App App
ASPOLICY
REMOVE
New sender and receiver channel property,
SPLPROT controls the use of AMS policies for
inbound and outbound messages
43
Data Set Encryption
Page Sets
Active Logs
QM Disk Read/Write
Encryption
Policy
Data Set
Encryption
Support for Z Data Set encryption has been extended.
Previously only the following MQ data sets could be
protected:
• BSDS
• CSQINP
• Archive Logs
Now, allows the encryption of data contained in
active logs and page sets.
44
Data set encryption: what about AMS?
AMS and data set encryption are complementary
technologies. For some scenarios dataset
encryption will be enough, for others AMS, or AMS
plus dataset encryption will be needed
© 2019 IBM Corporation
Application B
Application A
Channels
IBM MQ system
Queue Manager
Queue Manager
TLS Dataset
encryption
CF
Encryption
AMS
Protected on
the network
Protected on
disk
Protected in
qmgr/chinit
memory
Protected in CF
Protected end
to end
Transparent to
application
***
IBM MQ 9.1.4+ CD
z/OS
NB: AMS is more efficient than data set encryption
but can be more complicated to configure
IBM MQ ???
All Platforms
Statement of direction
In future continuous delivery (CD) releases, IBM
intends to deliver MQ for z/OS support for the
TLS 1.3 cryptographic protocol where it is
available by the z/OS operating system
The next Long Term Support (LTS) release of
IBM MQ and IBM MQ Appliance will be the last
to provide SSL v3 and TLS 1.0 support. IBM
intends to remove support in a future CD
release
© 2019 IBM Corporation
SSL
TLS 1.0
TLS 1.2
TLS 1.3
46
Additional
improvements
© 2019 IBM Corporation47
MQIPT updates
The MQ Internet Pass Thru allows messaging
solutions to be implemented to remote sites over
the internet
Provides an MQ aware proxy which can optionally
be configured for HTTPS tunneling
MQIPT used to be provided via support pack
MS81
From 9.1.4 MS81 will be provided on FixCentral
and will benefit from improved currency
-Updated to Java 8
-Old SSL/TLS protocols disabled
-TLS 1.2 supported
MS81 will reach EOS in April next year
IBM MQ 9.1.4 CD
48
MQIPT HSM Support
MQIPT can now support PKCS#11 HSM devices.
Requires one side of the communication to be a MQ Advanced Queue Manager
Queue Manager
Queue Manager
Queue Manager
Queue Manager
MQIPT
PKCS#11
49
Highly available MFT agents
Queue Manager
Queue Manager
MFTAgentMFTAgent
Queue Manager
Queue Manager
MFTAgentMFTAgent
50
IBM MQ Classes for .NET and XMS .NET Standard in
NuGet repo
IBMMQDotnetClient
amqmdnetstd.dll
IBMXMSDotnetClient
amqmdnetstd.dll
amqmxmsstd.dll
.NET Application Developer
51
New support for the IBM MQ Bridge to blockchain
52
Use of Aspera gateway streaming for IBM MQ messages
Statement of Direction: Extend FASP.io Gateway entitlement to MQ Advanced for z/OS VUE.
MQ Advanced and MQ Appliance queue managers are entitled to connect to the FASP.io
Gateway wherever it is deployed.
Aspera / FASP.io
Accelerates/improves data transport of any existing
desktop/server or server/server TCP-based workflows
New FASPv4 protocol
• Lightning speed regardless of the distance and network
conditions
• Bidirectional
• Single UDP port and DTLS
53
Use of Aspera gateway streaming for IBM MQ messages
Statement of Direction: Extend FASP.io Gateway entitlement to MQ Advanced for z/OS VUE.
MQ Advanced and MQ Appliance queue managers are entitled to connect to the FASP.io
Gateway wherever it is deployed.
Entitled users can obtain the gateway from Passport Advantage for use on x86-64 Linux
environments
54
OpenShift support for the IBM MQ Advanced certified
container image
Previously to run IBM MQ Certified Container on
Red Hat OpenShift you required IBM Cloud Private
IBM MQ Certified Container now supports
OpenShift native deployments.
New MQ RFE process
Steps
• RFE gets submitted against MQ
• RFE gets reviewed by development team
• RFE gets declined if deemed to be something
that we would never do
• RFE gets returned as a defect if it should be
addressed by raising a case
• If the RFE is valid, but is unlikely to be delivered
in the next year or so it gets declined
• Otherwise RFE is an uncommitted candidate
• Some of the RFEs get delivered in an MQ release
© 2019 IBM Corporation55
https://developer.ibm.com/messaging/2019/10/21/reviewing-
the-mq-rfe-request-for-enhancements-process/
56
Questions?
Thank You
58
Notices and disclaimers
Copyright © 2017 by International Business Machines Corporation (IBM). No part of this document may be reproduced or
transmitted in any form without written permission from IBM.
U.S. Government Users Restricted Rights — use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM.
Information in these presentations (including information relating to products that have not yet been announced by IBM) has been
reviewed for accuracy as of the date of initial publication and could include unintentional technical or typographical errors. IBM shall
have no responsibility to update this information. This document is distributed “as is” without any warranty, either express or implied.
In no event shall IBM be liable for any damage arising from the use of this information, including but not limited to, loss of data,
business interruption, loss of profit or loss of opportunity. IBM products and services are warranted according to the terms and
conditions of the agreements under which they are provided.
IBM products are manufactured from new parts or new and used parts.
In some cases, a product may not be new and may have been previously installed. Regardless, our warranty terms apply.”
Any statements regarding IBM's future direction, intent or product plans are subject to change or withdrawal without notice.
Performance data contained herein was generally obtained in a controlled, isolated environments. Customer examples are presented
as illustrations of how those customers have used IBM products and
the results they may have achieved. Actual performance, cost, savings or other results in other operating environments may vary.
References in this document to IBM products, programs, or services does not imply that IBM intends to make such products,
programs or services available in all countries in which IBM operates or does business.
59
Notices and disclaimers
Workshops, sessions and associated materials may have been prepared by independent session speakers, and do not necessarily
reflect the
views of IBM. All materials and discussions are provided for informational purposes only, and are neither intended to, nor shall
constitute legal or other guidance or advice to any individual participant or their specific situation.
It is the customer’s responsibility to insure its own compliance with legal requirements and to obtain advice of competent legal
counsel as to the identification and interpretation of any relevant laws and regulatory requirements that may affect the customer’s
business and any actions
the customer may need to take to comply with such laws. IBM does not provide legal advice or represent or warrant that its services
or products will ensure that the customer is in compliance with any law.
Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or
other publicly available sources. IBM has not tested those products in connection with this publication and cannot confirm the
accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM
products should be addressed to the suppliers of those products. IBM does not warrant the quality of any third-party products, or the
ability of any such third-party products to interoperate with IBM’s products. IBM expressly disclaims all warranties, expressed or
implied, including but not limited to, the implied warranties of merchantability and fitness for a particular, purpose.
The provision of the information contained herein is not intended to, and does not, grant any right or license under any IBM patents,
copyrights, trademarks or other intellectual property right.
60
Notices and disclaimers
IBM, the IBM logo, ibm.com, Aspera®, Bluemix, Blueworks Live, CICS, Clearcase, Cognos®, DOORS®, Emptoris®, Enterprise Document
Management System™, FASP®, FileNet®, Global Business Services®,
Global Technology Services®, IBM ExperienceOne™, IBM SmartCloud®, IBM Social Business®, Information on Demand, ILOG, Maximo®,
MQIntegrator®, MQSeries®, Netcool®, OMEGAMON, OpenPower, PureAnalytics™, PureApplication®, pureCluster™, PureCoverage®,
PureData®, PureExperience®, PureFlex®, pureQuery®, pureScale®, PureSystems®, QRadar®, Rational®, Rhapsody®, Smarter Commerce®,
SoDA, SPSS, Sterling Commerce®, StoredIQ, Tealeaf®, Tivoli® Trusteer®, Unica®, urban{code}®, Watson, WebSphere®, Worklight®, X-
Force® and System z® Z/OS, are trademarks of International Business Machines Corporation, registered in many jurisdictions
worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is
available on the Web at "Copyright and trademark information" at: www.ibm.com/legal/copytrade.shtml.

More Related Content

What's hot

M10: How to implement mq in a containerized architecture ITC 2019
M10: How to implement mq in a containerized architecture ITC 2019M10: How to implement mq in a containerized architecture ITC 2019
M10: How to implement mq in a containerized architecture ITC 2019Robert Parker
 
MQTC 2016: IBM MQ Security deep dive including AMS
MQTC 2016: IBM MQ Security deep dive including AMSMQTC 2016: IBM MQ Security deep dive including AMS
MQTC 2016: IBM MQ Security deep dive including AMSRobert Parker
 
IBM MQ in containers MQTC 2017
IBM MQ in containers MQTC 2017IBM MQ in containers MQTC 2017
IBM MQ in containers MQTC 2017Robert Parker
 
IBM MQ on cloud and containers
IBM MQ on cloud and containersIBM MQ on cloud and containers
IBM MQ on cloud and containersRobert Parker
 
Running IBM MQ in Containers
Running IBM MQ in ContainersRunning IBM MQ in Containers
Running IBM MQ in ContainersRobert Parker
 
Interconnect 2017: 6885 Deploying IBM MQ in the cloud
Interconnect 2017: 6885 Deploying IBM MQ in the cloudInterconnect 2017: 6885 Deploying IBM MQ in the cloud
Interconnect 2017: 6885 Deploying IBM MQ in the cloudRobert Parker
 
Designing IBM MQ deployments for the cloud generation
Designing IBM MQ deployments for the cloud generationDesigning IBM MQ deployments for the cloud generation
Designing IBM MQ deployments for the cloud generationDavid Ware
 
Building an Active-Active IBM MQ System
Building an Active-Active IBM MQ SystemBuilding an Active-Active IBM MQ System
Building an Active-Active IBM MQ Systemmatthew1001
 
MQTC 2016: Monitoring and Tracking MQ and Applications
MQTC 2016: Monitoring and Tracking MQ and ApplicationsMQTC 2016: Monitoring and Tracking MQ and Applications
MQTC 2016: Monitoring and Tracking MQ and ApplicationsRobert Parker
 
Expanding your options with the IBM MQ Appliance - IBM InterConnect 2016
Expanding your options with the IBM MQ Appliance - IBM InterConnect 2016Expanding your options with the IBM MQ Appliance - IBM InterConnect 2016
Expanding your options with the IBM MQ Appliance - IBM InterConnect 2016Leif Davidsen
 
IBM MQ Advanced - IBM InterConnect 2016
IBM MQ Advanced - IBM InterConnect 2016IBM MQ Advanced - IBM InterConnect 2016
IBM MQ Advanced - IBM InterConnect 2016Leif Davidsen
 
InterConnect 2016: IBM MQ self-service and as-a-service
InterConnect 2016: IBM MQ self-service and as-a-serviceInterConnect 2016: IBM MQ self-service and as-a-service
InterConnect 2016: IBM MQ self-service and as-a-serviceDavid Ware
 
IBM MQ Light @ Capitalware's MQTC 2.0.1.4 conference
IBM MQ Light @ Capitalware's MQTC 2.0.1.4 conferenceIBM MQ Light @ Capitalware's MQTC 2.0.1.4 conference
IBM MQ Light @ Capitalware's MQTC 2.0.1.4 conferencematthew1001
 
MQTC 2016 - IBM MQ Security: Overview & recap
MQTC 2016 - IBM MQ Security: Overview & recapMQTC 2016 - IBM MQ Security: Overview & recap
MQTC 2016 - IBM MQ Security: Overview & recapRobert Parker
 
MQ Support for z/OS Connect
MQ Support for z/OS ConnectMQ Support for z/OS Connect
MQ Support for z/OS ConnectMatt Leming
 
What's new in IBM MQ, March 2018
What's new in IBM MQ, March 2018What's new in IBM MQ, March 2018
What's new in IBM MQ, March 2018David Ware
 
IBM MQ - What's new in 9.2
IBM MQ - What's new in 9.2IBM MQ - What's new in 9.2
IBM MQ - What's new in 9.2David Ware
 
What's new in IBM MQ
What's new in IBM MQWhat's new in IBM MQ
What's new in IBM MQRobert Parker
 
The enterprise differentiator of mq on zos
The enterprise differentiator of mq on zosThe enterprise differentiator of mq on zos
The enterprise differentiator of mq on zosMatt Leming
 
IBM MQ High Availability 2019
IBM MQ High Availability 2019IBM MQ High Availability 2019
IBM MQ High Availability 2019David Ware
 

What's hot (20)

M10: How to implement mq in a containerized architecture ITC 2019
M10: How to implement mq in a containerized architecture ITC 2019M10: How to implement mq in a containerized architecture ITC 2019
M10: How to implement mq in a containerized architecture ITC 2019
 
MQTC 2016: IBM MQ Security deep dive including AMS
MQTC 2016: IBM MQ Security deep dive including AMSMQTC 2016: IBM MQ Security deep dive including AMS
MQTC 2016: IBM MQ Security deep dive including AMS
 
IBM MQ in containers MQTC 2017
IBM MQ in containers MQTC 2017IBM MQ in containers MQTC 2017
IBM MQ in containers MQTC 2017
 
IBM MQ on cloud and containers
IBM MQ on cloud and containersIBM MQ on cloud and containers
IBM MQ on cloud and containers
 
Running IBM MQ in Containers
Running IBM MQ in ContainersRunning IBM MQ in Containers
Running IBM MQ in Containers
 
Interconnect 2017: 6885 Deploying IBM MQ in the cloud
Interconnect 2017: 6885 Deploying IBM MQ in the cloudInterconnect 2017: 6885 Deploying IBM MQ in the cloud
Interconnect 2017: 6885 Deploying IBM MQ in the cloud
 
Designing IBM MQ deployments for the cloud generation
Designing IBM MQ deployments for the cloud generationDesigning IBM MQ deployments for the cloud generation
Designing IBM MQ deployments for the cloud generation
 
Building an Active-Active IBM MQ System
Building an Active-Active IBM MQ SystemBuilding an Active-Active IBM MQ System
Building an Active-Active IBM MQ System
 
MQTC 2016: Monitoring and Tracking MQ and Applications
MQTC 2016: Monitoring and Tracking MQ and ApplicationsMQTC 2016: Monitoring and Tracking MQ and Applications
MQTC 2016: Monitoring and Tracking MQ and Applications
 
Expanding your options with the IBM MQ Appliance - IBM InterConnect 2016
Expanding your options with the IBM MQ Appliance - IBM InterConnect 2016Expanding your options with the IBM MQ Appliance - IBM InterConnect 2016
Expanding your options with the IBM MQ Appliance - IBM InterConnect 2016
 
IBM MQ Advanced - IBM InterConnect 2016
IBM MQ Advanced - IBM InterConnect 2016IBM MQ Advanced - IBM InterConnect 2016
IBM MQ Advanced - IBM InterConnect 2016
 
InterConnect 2016: IBM MQ self-service and as-a-service
InterConnect 2016: IBM MQ self-service and as-a-serviceInterConnect 2016: IBM MQ self-service and as-a-service
InterConnect 2016: IBM MQ self-service and as-a-service
 
IBM MQ Light @ Capitalware's MQTC 2.0.1.4 conference
IBM MQ Light @ Capitalware's MQTC 2.0.1.4 conferenceIBM MQ Light @ Capitalware's MQTC 2.0.1.4 conference
IBM MQ Light @ Capitalware's MQTC 2.0.1.4 conference
 
MQTC 2016 - IBM MQ Security: Overview & recap
MQTC 2016 - IBM MQ Security: Overview & recapMQTC 2016 - IBM MQ Security: Overview & recap
MQTC 2016 - IBM MQ Security: Overview & recap
 
MQ Support for z/OS Connect
MQ Support for z/OS ConnectMQ Support for z/OS Connect
MQ Support for z/OS Connect
 
What's new in IBM MQ, March 2018
What's new in IBM MQ, March 2018What's new in IBM MQ, March 2018
What's new in IBM MQ, March 2018
 
IBM MQ - What's new in 9.2
IBM MQ - What's new in 9.2IBM MQ - What's new in 9.2
IBM MQ - What's new in 9.2
 
What's new in IBM MQ
What's new in IBM MQWhat's new in IBM MQ
What's new in IBM MQ
 
The enterprise differentiator of mq on zos
The enterprise differentiator of mq on zosThe enterprise differentiator of mq on zos
The enterprise differentiator of mq on zos
 
IBM MQ High Availability 2019
IBM MQ High Availability 2019IBM MQ High Availability 2019
IBM MQ High Availability 2019
 

Similar to IBM MQ v9.1.x CD improvements

InterConnect 2016: What's new in IBM MQ
InterConnect 2016: What's new in IBM MQInterConnect 2016: What's new in IBM MQ
InterConnect 2016: What's new in IBM MQDavid Ware
 
What's new in MQ 9.1.* on z/OS
What's new in MQ 9.1.* on z/OSWhat's new in MQ 9.1.* on z/OS
What's new in MQ 9.1.* on z/OSMatt Leming
 
Planning for MQ in the cloud MQTC 2017
Planning for MQ in the cloud MQTC 2017Planning for MQ in the cloud MQTC 2017
Planning for MQ in the cloud MQTC 2017Robert Parker
 
IBM MQ for z/OS The Latest and Greatest Enhancements
IBM MQ for z/OS The Latest and Greatest EnhancementsIBM MQ for z/OS The Latest and Greatest Enhancements
IBM MQ for z/OS The Latest and Greatest EnhancementsPete Siddall
 
Whats new in IBM MQ; V9 LTS, V9.0.1 CD and V9.0.2 CD
Whats new in IBM MQ; V9 LTS, V9.0.1 CD and V9.0.2 CDWhats new in IBM MQ; V9 LTS, V9.0.1 CD and V9.0.2 CD
Whats new in IBM MQ; V9 LTS, V9.0.1 CD and V9.0.2 CDDavid Ware
 
IBM MQ Whats new - up to 9.3.4.pdf
IBM MQ Whats new - up to 9.3.4.pdfIBM MQ Whats new - up to 9.3.4.pdf
IBM MQ Whats new - up to 9.3.4.pdfRobert Parker
 
IBM MQ Update, including 9.1.2 CD
IBM MQ Update, including 9.1.2 CDIBM MQ Update, including 9.1.2 CD
IBM MQ Update, including 9.1.2 CDDavid Ware
 
IBM MQ What's new - Sept 2022
IBM MQ What's new - Sept 2022IBM MQ What's new - Sept 2022
IBM MQ What's new - Sept 2022David Ware
 
HHM-3481: IBM MQ for z/OS: Enhancing Application and Messaging Connectivity ...
 HHM-3481: IBM MQ for z/OS: Enhancing Application and Messaging Connectivity ... HHM-3481: IBM MQ for z/OS: Enhancing Application and Messaging Connectivity ...
HHM-3481: IBM MQ for z/OS: Enhancing Application and Messaging Connectivity ...Matt Leming
 
What's new with MQ on z/OS 9.3 and 9.3.1
What's new with MQ on z/OS 9.3 and 9.3.1What's new with MQ on z/OS 9.3 and 9.3.1
What's new with MQ on z/OS 9.3 and 9.3.1Matt Leming
 
IBM Interconnect 2016 - Hybrid Cloud Messaging
IBM Interconnect 2016 - Hybrid Cloud MessagingIBM Interconnect 2016 - Hybrid Cloud Messaging
IBM Interconnect 2016 - Hybrid Cloud MessagingRobert Nicholson
 
What's New in IBM MQ - Version 8
What's New in IBM MQ - Version 8What's New in IBM MQ - Version 8
What's New in IBM MQ - Version 8MarkTaylorIBM
 
Realtime mobile&iot solutions using mqtt and message sight
Realtime mobile&iot solutions using mqtt and message sightRealtime mobile&iot solutions using mqtt and message sight
Realtime mobile&iot solutions using mqtt and message sightfloridawusergroup
 
Expanding your options with the MQ Appliance
Expanding your options with the MQ ApplianceExpanding your options with the MQ Appliance
Expanding your options with the MQ ApplianceAnthony Beardsmore
 
What's new in MQ 9.1 on z/OS
What's new in MQ 9.1 on z/OSWhat's new in MQ 9.1 on z/OS
What's new in MQ 9.1 on z/OSMatt Leming
 
What's new in IBM MQ Messaging
What's new in IBM MQ MessagingWhat's new in IBM MQ Messaging
What's new in IBM MQ MessagingMarkTaylorIBM
 
HHM 6887 Managing Your Scalable Applications in an MQ Hybrid Cloud World
HHM 6887 Managing Your Scalable Applications in an MQ Hybrid Cloud WorldHHM 6887 Managing Your Scalable Applications in an MQ Hybrid Cloud World
HHM 6887 Managing Your Scalable Applications in an MQ Hybrid Cloud Worldmatthew1001
 
What's New in IBM Messaging
What's New in IBM MessagingWhat's New in IBM Messaging
What's New in IBM MessagingMorag Hughson
 
What's New In MQ 9.2 on z/OS
What's New In MQ 9.2 on z/OSWhat's New In MQ 9.2 on z/OS
What's New In MQ 9.2 on z/OSMatt Leming
 

Similar to IBM MQ v9.1.x CD improvements (20)

InterConnect 2016: What's new in IBM MQ
InterConnect 2016: What's new in IBM MQInterConnect 2016: What's new in IBM MQ
InterConnect 2016: What's new in IBM MQ
 
What's new in MQ 9.1.* on z/OS
What's new in MQ 9.1.* on z/OSWhat's new in MQ 9.1.* on z/OS
What's new in MQ 9.1.* on z/OS
 
Planning for MQ in the cloud MQTC 2017
Planning for MQ in the cloud MQTC 2017Planning for MQ in the cloud MQTC 2017
Planning for MQ in the cloud MQTC 2017
 
IBM MQ for z/OS The Latest and Greatest Enhancements
IBM MQ for z/OS The Latest and Greatest EnhancementsIBM MQ for z/OS The Latest and Greatest Enhancements
IBM MQ for z/OS The Latest and Greatest Enhancements
 
Whats new in IBM MQ; V9 LTS, V9.0.1 CD and V9.0.2 CD
Whats new in IBM MQ; V9 LTS, V9.0.1 CD and V9.0.2 CDWhats new in IBM MQ; V9 LTS, V9.0.1 CD and V9.0.2 CD
Whats new in IBM MQ; V9 LTS, V9.0.1 CD and V9.0.2 CD
 
IBM MQ Whats new - up to 9.3.4.pdf
IBM MQ Whats new - up to 9.3.4.pdfIBM MQ Whats new - up to 9.3.4.pdf
IBM MQ Whats new - up to 9.3.4.pdf
 
IBM MQ Update, including 9.1.2 CD
IBM MQ Update, including 9.1.2 CDIBM MQ Update, including 9.1.2 CD
IBM MQ Update, including 9.1.2 CD
 
IBM MQ What's new - Sept 2022
IBM MQ What's new - Sept 2022IBM MQ What's new - Sept 2022
IBM MQ What's new - Sept 2022
 
IBM MQ V9 Overview
IBM MQ V9 OverviewIBM MQ V9 Overview
IBM MQ V9 Overview
 
HHM-3481: IBM MQ for z/OS: Enhancing Application and Messaging Connectivity ...
 HHM-3481: IBM MQ for z/OS: Enhancing Application and Messaging Connectivity ... HHM-3481: IBM MQ for z/OS: Enhancing Application and Messaging Connectivity ...
HHM-3481: IBM MQ for z/OS: Enhancing Application and Messaging Connectivity ...
 
What's new with MQ on z/OS 9.3 and 9.3.1
What's new with MQ on z/OS 9.3 and 9.3.1What's new with MQ on z/OS 9.3 and 9.3.1
What's new with MQ on z/OS 9.3 and 9.3.1
 
IBM Interconnect 2016 - Hybrid Cloud Messaging
IBM Interconnect 2016 - Hybrid Cloud MessagingIBM Interconnect 2016 - Hybrid Cloud Messaging
IBM Interconnect 2016 - Hybrid Cloud Messaging
 
What's New in IBM MQ - Version 8
What's New in IBM MQ - Version 8What's New in IBM MQ - Version 8
What's New in IBM MQ - Version 8
 
Realtime mobile&iot solutions using mqtt and message sight
Realtime mobile&iot solutions using mqtt and message sightRealtime mobile&iot solutions using mqtt and message sight
Realtime mobile&iot solutions using mqtt and message sight
 
Expanding your options with the MQ Appliance
Expanding your options with the MQ ApplianceExpanding your options with the MQ Appliance
Expanding your options with the MQ Appliance
 
What's new in MQ 9.1 on z/OS
What's new in MQ 9.1 on z/OSWhat's new in MQ 9.1 on z/OS
What's new in MQ 9.1 on z/OS
 
What's new in IBM MQ Messaging
What's new in IBM MQ MessagingWhat's new in IBM MQ Messaging
What's new in IBM MQ Messaging
 
HHM 6887 Managing Your Scalable Applications in an MQ Hybrid Cloud World
HHM 6887 Managing Your Scalable Applications in an MQ Hybrid Cloud WorldHHM 6887 Managing Your Scalable Applications in an MQ Hybrid Cloud World
HHM 6887 Managing Your Scalable Applications in an MQ Hybrid Cloud World
 
What's New in IBM Messaging
What's New in IBM MessagingWhat's New in IBM Messaging
What's New in IBM Messaging
 
What's New In MQ 9.2 on z/OS
What's New In MQ 9.2 on z/OSWhat's New In MQ 9.2 on z/OS
What's New In MQ 9.2 on z/OS
 

More from Robert Parker

Simplifying IBM MQ Security in your MQ estate
Simplifying IBM MQ Security in your MQ estateSimplifying IBM MQ Security in your MQ estate
Simplifying IBM MQ Security in your MQ estateRobert Parker
 
IBM MQ Token Authentication.pdf
IBM MQ Token Authentication.pdfIBM MQ Token Authentication.pdf
IBM MQ Token Authentication.pdfRobert Parker
 
IBM MQ Whats new - including 9.3 and 9.3.1
IBM MQ Whats new - including 9.3 and 9.3.1IBM MQ Whats new - including 9.3 and 9.3.1
IBM MQ Whats new - including 9.3 and 9.3.1Robert Parker
 
Controlling access to your IBM MQ System
Controlling access to your IBM MQ SystemControlling access to your IBM MQ System
Controlling access to your IBM MQ SystemRobert Parker
 
M08 protecting your message data in IBM MQ with encryption
M08 protecting your message data in IBM MQ with encryptionM08 protecting your message data in IBM MQ with encryption
M08 protecting your message data in IBM MQ with encryptionRobert Parker
 
IBM MQ in Containers - Think 2018
IBM MQ in Containers - Think 2018IBM MQ in Containers - Think 2018
IBM MQ in Containers - Think 2018Robert Parker
 
Deploying and managing IBM MQ in the Cloud
Deploying and managing IBM MQ in the CloudDeploying and managing IBM MQ in the Cloud
Deploying and managing IBM MQ in the CloudRobert Parker
 
Interconnect 2017: 6893 Keep out the bad guys by securing your MQ messaging e...
Interconnect 2017: 6893 Keep out the bad guys by securing your MQ messaging e...Interconnect 2017: 6893 Keep out the bad guys by securing your MQ messaging e...
Interconnect 2017: 6893 Keep out the bad guys by securing your MQ messaging e...Robert Parker
 
CTU 2017 - I168 IBM MQ in the cloud
CTU 2017 - I168 IBM MQ in the cloudCTU 2017 - I168 IBM MQ in the cloud
CTU 2017 - I168 IBM MQ in the cloudRobert Parker
 
CTU 2017 I173 - how to transform your messaging environment to a secure messa...
CTU 2017 I173 - how to transform your messaging environment to a secure messa...CTU 2017 I173 - how to transform your messaging environment to a secure messa...
CTU 2017 I173 - how to transform your messaging environment to a secure messa...Robert Parker
 
3433 IBM messaging security why securing your environment is important-feb2...
3433   IBM messaging security why securing your environment is important-feb2...3433   IBM messaging security why securing your environment is important-feb2...
3433 IBM messaging security why securing your environment is important-feb2...Robert Parker
 

More from Robert Parker (11)

Simplifying IBM MQ Security in your MQ estate
Simplifying IBM MQ Security in your MQ estateSimplifying IBM MQ Security in your MQ estate
Simplifying IBM MQ Security in your MQ estate
 
IBM MQ Token Authentication.pdf
IBM MQ Token Authentication.pdfIBM MQ Token Authentication.pdf
IBM MQ Token Authentication.pdf
 
IBM MQ Whats new - including 9.3 and 9.3.1
IBM MQ Whats new - including 9.3 and 9.3.1IBM MQ Whats new - including 9.3 and 9.3.1
IBM MQ Whats new - including 9.3 and 9.3.1
 
Controlling access to your IBM MQ System
Controlling access to your IBM MQ SystemControlling access to your IBM MQ System
Controlling access to your IBM MQ System
 
M08 protecting your message data in IBM MQ with encryption
M08 protecting your message data in IBM MQ with encryptionM08 protecting your message data in IBM MQ with encryption
M08 protecting your message data in IBM MQ with encryption
 
IBM MQ in Containers - Think 2018
IBM MQ in Containers - Think 2018IBM MQ in Containers - Think 2018
IBM MQ in Containers - Think 2018
 
Deploying and managing IBM MQ in the Cloud
Deploying and managing IBM MQ in the CloudDeploying and managing IBM MQ in the Cloud
Deploying and managing IBM MQ in the Cloud
 
Interconnect 2017: 6893 Keep out the bad guys by securing your MQ messaging e...
Interconnect 2017: 6893 Keep out the bad guys by securing your MQ messaging e...Interconnect 2017: 6893 Keep out the bad guys by securing your MQ messaging e...
Interconnect 2017: 6893 Keep out the bad guys by securing your MQ messaging e...
 
CTU 2017 - I168 IBM MQ in the cloud
CTU 2017 - I168 IBM MQ in the cloudCTU 2017 - I168 IBM MQ in the cloud
CTU 2017 - I168 IBM MQ in the cloud
 
CTU 2017 I173 - how to transform your messaging environment to a secure messa...
CTU 2017 I173 - how to transform your messaging environment to a secure messa...CTU 2017 I173 - how to transform your messaging environment to a secure messa...
CTU 2017 I173 - how to transform your messaging environment to a secure messa...
 
3433 IBM messaging security why securing your environment is important-feb2...
3433   IBM messaging security why securing your environment is important-feb2...3433   IBM messaging security why securing your environment is important-feb2...
3433 IBM messaging security why securing your environment is important-feb2...
 

Recently uploaded

办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样
办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样
办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样umasea
 
Buds n Tech IT Solutions: Top-Notch Web Services in Noida
Buds n Tech IT Solutions: Top-Notch Web Services in NoidaBuds n Tech IT Solutions: Top-Notch Web Services in Noida
Buds n Tech IT Solutions: Top-Notch Web Services in Noidabntitsolutionsrishis
 
Building a General PDE Solving Framework with Symbolic-Numeric Scientific Mac...
Building a General PDE Solving Framework with Symbolic-Numeric Scientific Mac...Building a General PDE Solving Framework with Symbolic-Numeric Scientific Mac...
Building a General PDE Solving Framework with Symbolic-Numeric Scientific Mac...stazi3110
 
Implementing Zero Trust strategy with Azure
Implementing Zero Trust strategy with AzureImplementing Zero Trust strategy with Azure
Implementing Zero Trust strategy with AzureDinusha Kumarasiri
 
Russian Call Girls in Karol Bagh Aasnvi ➡️ 8264348440 💋📞 Independent Escort S...
Russian Call Girls in Karol Bagh Aasnvi ➡️ 8264348440 💋📞 Independent Escort S...Russian Call Girls in Karol Bagh Aasnvi ➡️ 8264348440 💋📞 Independent Escort S...
Russian Call Girls in Karol Bagh Aasnvi ➡️ 8264348440 💋📞 Independent Escort S...soniya singh
 
Balasore Best It Company|| Top 10 IT Company || Balasore Software company Odisha
Balasore Best It Company|| Top 10 IT Company || Balasore Software company OdishaBalasore Best It Company|| Top 10 IT Company || Balasore Software company Odisha
Balasore Best It Company|| Top 10 IT Company || Balasore Software company Odishasmiwainfosol
 
英国UN学位证,北安普顿大学毕业证书1:1制作
英国UN学位证,北安普顿大学毕业证书1:1制作英国UN学位证,北安普顿大学毕业证书1:1制作
英国UN学位证,北安普顿大学毕业证书1:1制作qr0udbr0
 
Automate your Kamailio Test Calls - Kamailio World 2024
Automate your Kamailio Test Calls - Kamailio World 2024Automate your Kamailio Test Calls - Kamailio World 2024
Automate your Kamailio Test Calls - Kamailio World 2024Andreas Granig
 
Software Project Health Check: Best Practices and Techniques for Your Product...
Software Project Health Check: Best Practices and Techniques for Your Product...Software Project Health Check: Best Practices and Techniques for Your Product...
Software Project Health Check: Best Practices and Techniques for Your Product...Velvetech LLC
 
Call Us🔝>༒+91-9711147426⇛Call In girls karol bagh (Delhi)
Call Us🔝>༒+91-9711147426⇛Call In girls karol bagh (Delhi)Call Us🔝>༒+91-9711147426⇛Call In girls karol bagh (Delhi)
Call Us🔝>༒+91-9711147426⇛Call In girls karol bagh (Delhi)jennyeacort
 
Intelligent Home Wi-Fi Solutions | ThinkPalm
Intelligent Home Wi-Fi Solutions | ThinkPalmIntelligent Home Wi-Fi Solutions | ThinkPalm
Intelligent Home Wi-Fi Solutions | ThinkPalmSujith Sukumaran
 
Folding Cheat Sheet #4 - fourth in a series
Folding Cheat Sheet #4 - fourth in a seriesFolding Cheat Sheet #4 - fourth in a series
Folding Cheat Sheet #4 - fourth in a seriesPhilip Schwarz
 
Cloud Management Software Platforms: OpenStack
Cloud Management Software Platforms: OpenStackCloud Management Software Platforms: OpenStack
Cloud Management Software Platforms: OpenStackVICTOR MAESTRE RAMIREZ
 
MYjobs Presentation Django-based project
MYjobs Presentation Django-based projectMYjobs Presentation Django-based project
MYjobs Presentation Django-based projectAnoyGreter
 
GOING AOT WITH GRAALVM – DEVOXX GREECE.pdf
GOING AOT WITH GRAALVM – DEVOXX GREECE.pdfGOING AOT WITH GRAALVM – DEVOXX GREECE.pdf
GOING AOT WITH GRAALVM – DEVOXX GREECE.pdfAlina Yurenko
 
Introduction Computer Science - Software Design.pdf
Introduction Computer Science - Software Design.pdfIntroduction Computer Science - Software Design.pdf
Introduction Computer Science - Software Design.pdfFerryKemperman
 
KnowAPIs-UnknownPerf-jaxMainz-2024 (1).pptx
KnowAPIs-UnknownPerf-jaxMainz-2024 (1).pptxKnowAPIs-UnknownPerf-jaxMainz-2024 (1).pptx
KnowAPIs-UnknownPerf-jaxMainz-2024 (1).pptxTier1 app
 
SpotFlow: Tracking Method Calls and States at Runtime
SpotFlow: Tracking Method Calls and States at RuntimeSpotFlow: Tracking Method Calls and States at Runtime
SpotFlow: Tracking Method Calls and States at Runtimeandrehoraa
 
BATTLEFIELD ORM: TIPS, TACTICS AND STRATEGIES FOR CONQUERING YOUR DATABASE
BATTLEFIELD ORM: TIPS, TACTICS AND STRATEGIES FOR CONQUERING YOUR DATABASEBATTLEFIELD ORM: TIPS, TACTICS AND STRATEGIES FOR CONQUERING YOUR DATABASE
BATTLEFIELD ORM: TIPS, TACTICS AND STRATEGIES FOR CONQUERING YOUR DATABASEOrtus Solutions, Corp
 

Recently uploaded (20)

办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样
办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样
办理学位证(UQ文凭证书)昆士兰大学毕业证成绩单原版一模一样
 
2.pdf Ejercicios de programación competitiva
2.pdf Ejercicios de programación competitiva2.pdf Ejercicios de programación competitiva
2.pdf Ejercicios de programación competitiva
 
Buds n Tech IT Solutions: Top-Notch Web Services in Noida
Buds n Tech IT Solutions: Top-Notch Web Services in NoidaBuds n Tech IT Solutions: Top-Notch Web Services in Noida
Buds n Tech IT Solutions: Top-Notch Web Services in Noida
 
Building a General PDE Solving Framework with Symbolic-Numeric Scientific Mac...
Building a General PDE Solving Framework with Symbolic-Numeric Scientific Mac...Building a General PDE Solving Framework with Symbolic-Numeric Scientific Mac...
Building a General PDE Solving Framework with Symbolic-Numeric Scientific Mac...
 
Implementing Zero Trust strategy with Azure
Implementing Zero Trust strategy with AzureImplementing Zero Trust strategy with Azure
Implementing Zero Trust strategy with Azure
 
Russian Call Girls in Karol Bagh Aasnvi ➡️ 8264348440 💋📞 Independent Escort S...
Russian Call Girls in Karol Bagh Aasnvi ➡️ 8264348440 💋📞 Independent Escort S...Russian Call Girls in Karol Bagh Aasnvi ➡️ 8264348440 💋📞 Independent Escort S...
Russian Call Girls in Karol Bagh Aasnvi ➡️ 8264348440 💋📞 Independent Escort S...
 
Balasore Best It Company|| Top 10 IT Company || Balasore Software company Odisha
Balasore Best It Company|| Top 10 IT Company || Balasore Software company OdishaBalasore Best It Company|| Top 10 IT Company || Balasore Software company Odisha
Balasore Best It Company|| Top 10 IT Company || Balasore Software company Odisha
 
英国UN学位证,北安普顿大学毕业证书1:1制作
英国UN学位证,北安普顿大学毕业证书1:1制作英国UN学位证,北安普顿大学毕业证书1:1制作
英国UN学位证,北安普顿大学毕业证书1:1制作
 
Automate your Kamailio Test Calls - Kamailio World 2024
Automate your Kamailio Test Calls - Kamailio World 2024Automate your Kamailio Test Calls - Kamailio World 2024
Automate your Kamailio Test Calls - Kamailio World 2024
 
Software Project Health Check: Best Practices and Techniques for Your Product...
Software Project Health Check: Best Practices and Techniques for Your Product...Software Project Health Check: Best Practices and Techniques for Your Product...
Software Project Health Check: Best Practices and Techniques for Your Product...
 
Call Us🔝>༒+91-9711147426⇛Call In girls karol bagh (Delhi)
Call Us🔝>༒+91-9711147426⇛Call In girls karol bagh (Delhi)Call Us🔝>༒+91-9711147426⇛Call In girls karol bagh (Delhi)
Call Us🔝>༒+91-9711147426⇛Call In girls karol bagh (Delhi)
 
Intelligent Home Wi-Fi Solutions | ThinkPalm
Intelligent Home Wi-Fi Solutions | ThinkPalmIntelligent Home Wi-Fi Solutions | ThinkPalm
Intelligent Home Wi-Fi Solutions | ThinkPalm
 
Folding Cheat Sheet #4 - fourth in a series
Folding Cheat Sheet #4 - fourth in a seriesFolding Cheat Sheet #4 - fourth in a series
Folding Cheat Sheet #4 - fourth in a series
 
Cloud Management Software Platforms: OpenStack
Cloud Management Software Platforms: OpenStackCloud Management Software Platforms: OpenStack
Cloud Management Software Platforms: OpenStack
 
MYjobs Presentation Django-based project
MYjobs Presentation Django-based projectMYjobs Presentation Django-based project
MYjobs Presentation Django-based project
 
GOING AOT WITH GRAALVM – DEVOXX GREECE.pdf
GOING AOT WITH GRAALVM – DEVOXX GREECE.pdfGOING AOT WITH GRAALVM – DEVOXX GREECE.pdf
GOING AOT WITH GRAALVM – DEVOXX GREECE.pdf
 
Introduction Computer Science - Software Design.pdf
Introduction Computer Science - Software Design.pdfIntroduction Computer Science - Software Design.pdf
Introduction Computer Science - Software Design.pdf
 
KnowAPIs-UnknownPerf-jaxMainz-2024 (1).pptx
KnowAPIs-UnknownPerf-jaxMainz-2024 (1).pptxKnowAPIs-UnknownPerf-jaxMainz-2024 (1).pptx
KnowAPIs-UnknownPerf-jaxMainz-2024 (1).pptx
 
SpotFlow: Tracking Method Calls and States at Runtime
SpotFlow: Tracking Method Calls and States at RuntimeSpotFlow: Tracking Method Calls and States at Runtime
SpotFlow: Tracking Method Calls and States at Runtime
 
BATTLEFIELD ORM: TIPS, TACTICS AND STRATEGIES FOR CONQUERING YOUR DATABASE
BATTLEFIELD ORM: TIPS, TACTICS AND STRATEGIES FOR CONQUERING YOUR DATABASEBATTLEFIELD ORM: TIPS, TACTICS AND STRATEGIES FOR CONQUERING YOUR DATABASE
BATTLEFIELD ORM: TIPS, TACTICS AND STRATEGIES FOR CONQUERING YOUR DATABASE
 

IBM MQ v9.1.x CD improvements

  • 1. What’s new in IBM MQ v9.1.x RobParker SoftwareEngineer,SecurityFocal IBMMQDevelopment. parrobe@uk.ibm.com
  • 2. 2 Please note: IBM’s statements regarding its plans, directions, and intent are subject to change or withdrawal without notice at IBM’s sole discretion. Information regarding potential future products is intended to outline our general product direction and it should not be relied on in making a purchasing decision. The information mentioned regarding potential future products is not a commitment, promise, or legal obligation to deliver any material, code or functionality. Information about potential future products may not be incorporated into any contract. The development, release, and timing of any future features or functionality described for our products remains at our sole discretion. Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput or performance that any user will experience will vary depending upon many factors, including considerations such as the amount of multiprogramming in the user’s job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve results similar to those stated here.
  • 3. Mix and Match Both are available under the same license. Both can interoperate, just like any previous version of MQ. Continuous Delivery New CD versions of MQ are released approximately every four months, incrementally introducing new product capabilities. Intended for those that can continually integrate. Long Term Support Approximately every two years a new LTS version is released, rolling up many of the CD capabilities into a release with 5+3 support attached. Required by those looking for fixed function. In 2016 MQ introduced a dual Long Term Support and a Continuous Delivery model IBM MQ: long term support and continuous delivery 2017 2018 S V9.0.1 CD V9.0.2 CD V9.0.3 CD V9.0.4 CD V9.0.5 CD liance MQ on IBM Cloud 2019 2020 V9.1 LTS V9.1.1 CD V9.1.2 CD V9.1.3 CD V9.1.4 CD © 2019 IBM Corporation available 3 … soon
  • 4. 4 MQ 9.1.X CD Content So Far Uniform Cluster automatic application rebalancing Automatic TLS CipherSpec negotiation Client connectivity with zCEE Microsoft .NET Core support Developer toolkit for MacOS Enhanced Salesforce Bridge Full JSON-syntax REST administration Permitted TLS CipherSpec control REST messaging performance enhancements JSON format CCDT MQ Appliance HA event notifications WebSphere Liberty MDB pause ini file and MQSC injection at startup Escalating end queue manager MQFT REST list resource monitors New consistent MQ samples New application status checking Channel enabled AMS policies for z/OS Browse messages using REST Build toolkit for zCEE Idempotent MQSC commands Rapid Uniform Cluster rebalancing Improved distributed queue manager restart times Stream MQ Appliance error logs Enhanced Blockchain Bridge MFT REST create file transfer FTP server support on IBM I for MFT Highly available MFT Agent deployments Automatic Cluster configuration Packaged MQ Internet Passthru (IPT) XA support in Liberty for decoupled JMS connections z/OS data set encryption support MQ Appliance admin activity audit logging TLS 1.3 support User controlled application naming MQIPT HSM Support
  • 5. Introducing the new z15 Providing next level resiliency and data privacy to hybrid cloud infrastructures Up to 190 GPs, 40TB RAM 25% more capacity than z14 in same data centre footprint!
  • 6. Make the most of z15 with MQ for z/OS Data Protection & Privacy Protected data within IBM Z • MQ supports z/OS data set encryption as part of a pervasive encryption strategy End-to-end data protection • MQ Advanced Message Security secures data throughout the messaging network, protecting against external and internal security threats Enhanced encryption performance • Crypto Express7S and CPACF acceleration reduces cost of MQ channel and message level encryption Business Continuity & Resiliency Workload restart and recovery • MQ benefits automatically from System Recovery Boost, speeding queue manager restarts and workload catchup Service and data high availability • MQ Queue Sharing Groups exploit the resiliency of IBM Z hardware, providing truly active-active messaging Embedded operational data and analytics • MQ SMF data provides KPIs that can feed the diagnostic and analytic capabilities of z15 Cloud Integration Cloud workloads & management • MQ runs within z/OS Container Extensions to provide cloud applications with a connectivity gateway to the mainframe • MQ provides z/OSMF templates for self service provisioning of queue managers and queues via z/OS Cloud Broker Cloud Native • Cloud applications can easily access MQ resources via the MQ service provider for z/OS Connect with build toolkit support to automate DevOps pipelines • MQ REST APIs, web console and CLI available within Zowe framework Standardized & Flexible for the Cloud Data Center Modular and Scalable 1-4 frames depending on capacity requirements Industry Standard 19” Form Factor with choice of power and cooling On-Chip Acceleration Compression accelerator reduces cost of messages over MQ channels and storage for persistent messages 8
  • 7. z/OS Container Extensions New with z/OS 2.4, zCX allows you to run zLinux applications in a Docker container directly on a z/OS LPAR Application developers can develop, and data centers can operate, popular open source packages, Linux applications, IBM software, and third-party software together with z/OS applications and data Can run on zIIP, no need for IFL Can exploit HyperSockets Some interesting MQ options: • Client concentrator • Cluster full repository http://www.redbooks.ibm.com/abstracts/sg248457.html z/OS LPAR zCX MQ on zLinux MQ on z/OS MQ on z/OS App App App App App App Sender receiver channels zHyperSockets MQ running as client concentrator in zCX
  • 9. 11 New and updated JSON MQSC options Support has been added for the DISPLAY CONN MQSC commands QM1 IBM MQ Console { "type": "runCommandJSON", "command": ”display", "qualifier": ”conn", "name": ”*", "parameters": { ”type": “HANDLE” } }
  • 10. 12 New and updated JSON MQSC options Single quotation marks no longer need to be escaped QM1 IBM MQ Console { "type": "runCommandJSON", "command": ”define", "qualifier": ”qlocal", "name": ”QL", "parameters": { "descr" : "single 'quotation' marks” } }
  • 11. 13 New and updated JSON MQSC options SET POLICY has been updated to support a JSON array of signers or recipients QM1 IBM MQ Console { "type": "runCommandJSON", "command": "set", "qualifier": "policy", "name": "POL.Q1", "parameters": { "signer": ["CN=Alice", "CN=Bob"], "recip": ["CN=User1"], "encalg": "RC2", "signalg": "SHA256" } }
  • 12. 14 Better HTTP return codes for REST MQSC QM1 IBM MQ Console HTTP: 200 { "type": "runCommandJSON", "command": "define", "qualifier": "qolcal", "name": "Q1", "parameters": { "descr": "A test queue" } } { "commandResponse": [ { "completionCode": 2, "message": [ "AMQ8426I: Valid MQSC commands are" ], "reasonCode": 10 } ], "overallCompletionCode": 2, "overallReasonCode": 10 }
  • 13. 15 Better HTTP return codes for REST MQSC QM1 IBM MQ Console HTTP: 400 { "type": "runCommandJSON", "command": "define", "qualifier": "qolcal", "name": "Q1", "parameters": { "descr": "A test queue" } } { "commandResponse": [ { "completionCode": 2, "message": [ "AMQ8426I: Valid MQSC commands are" ], "reasonCode": 10 } ], "overallCompletionCode": 2, "overallReasonCode": 10 }
  • 14. 16 Managed File Transfer REST API changes QM1 IBM MQ Console POST MFT Resource Monitor MFT Agent DELETE • POST and DELETE calls can be used to managed MFT Resource Monitors • MQWebUser role can now be used to authenticate users
  • 16. IBM MQ Advanced 9.1 LTS RHEL x86 MQ HA Group Node 2 Node 3Node 1 Replicated Data Queue Managers App Network App App MQ Advanced for RHEL x86-64 18 © 2019 IBM Corporation Linux only, MQ Advanced HA solution with no need for a shared file system or HA cluster Three-way replication and monitoring for quorum support Synchronous data replication for once and once only transactional delivery of messages Active/passive queue managers with automatic takeover Per queue manager control to support active/active utilisation of nodes MQ licensing is aligned to maximise benefits
  • 17. IBM MQ 9.1.1+ CDImprovements in restart times 19 © 2019 IBM Corporation Sub-second queue manager restarts under load* are now possible In 9.1.4 new ability to set a time limit on how long a queue manager takes to shut down endmqm MQ1 –t 5 Shuts queue manager down with a target time of 5 seconds. Essential queue manager tasks are allowed to complete. There is a tp variant which is more aggressive V9.1.0.2 Multi-instance queue manager V9.1.0.2 Replicated data queue manager V9.1.2 Multi-instance queue manager V9.1.2 Replicated data queue manager Operator instigated switch over Abrupt failover *500 connected applications, driving 50k-85k msgs/sec
  • 18. IBM MQ Advanced 9.1 LTS RHEL x86 Node 2Node 1 data replication Replicated Data Queue Managers App Manual failover RDQM also supports a looser coupled pair of nodes for data replication but with no automatic failover, often for Disaster Recovery Data replication can be Asynchronous for systems separated by a high latency network Synchronous for systems on a low latency network © 2019 IBM Corporation 20MQ Advanced for RHEL x86-64
  • 19. IBM MQ Advanced ??? RHEL x86 Statement of direction Enhancements to replicated data queue manager functions in MQ Advanced that will enable the synchronous replication of data for a three-way, high-availability configuration and simultaneous asynchronous replication of data to another three- way, high-availability configuration for disaster recovery © 2019 IBM Corporation MQ Advanced for RHEL x86-64
  • 21. Building scalable, fault tolerant, solutions Many of you have built your own continuously available and horizontally scalable solutions over the years Let’s call this the “uniform cluster” pattern MQ has provided you many of the building blocks - Client auto-reconnect CCDT queue manager groups But you’re left to solve some of the problems, particularly with long running applications - Efficiently distributing your applications Ensuring all messages are processed Maintaining availability during maintenance Handling growth and contraction of scale App App App decoupled AppApp © 2019 IBM Corporation23
  • 22. Uniform Cluster © 2019 IBM Corporation24 MQ 9.1.2 started to make that easier For the distributed platforms, declare a set of matching queue managers to be following the uniform cluster pattern All members of an MQ Cluster Matching queues are defined on every queue manager Applications can connect as clients to every queue manager MQ will automatically share application connectivity knowledge between queue managers The group will use this knowledge to automatically keep matching application instances balanced across the queue managers Matching applications are based on application name (new abilities to programmatically define this) MQ is incrementally rolling out the client support for this through the CD releases IBM MQ 9.1.2+ CD Application awareness
  • 23. Application awareness © 2019 IBM Corporation25 App App Automatic application balancing Application instances can initially connect to any member of the group We recommend you use a queue manager group and CCDT to remove any SPoF Every member of the uniform cluster will detect an imbalance and request other queue managers to donate their applications Hosting queue managers will instigate a client auto- reconnect with instructions of where to reconnect to Applications that have enabled auto-reconnect will automatically move their connection to the indicated queue manager 9.1.2 CD added support for C-based applications 9.1.3 CD has added JMS SE support 9.1.4 CD adds .NET and XMS .NET support and speeds up the rebalancing process App App App App IBM MQ 9.1.X CD
  • 24. Uniform cluster administration © 2019 IBM Corporation Uniform Cluster TuningParameters: UniformClusterName=<MQ_CLUSTER_NAME> ALTER QMGR REPOS(…. DEFINE CHANNEL(….. DEFINE CHANNEL(….. DEFINE QLOCAL(…. …. TuningParameters: UniformClusterName=<MQ_CLUSTER_NAME> TuningParameters: UniformClusterName=<MQ_CLUSTER_NAME> ALTER QMGR REPOS(…. DEFINE CHANNEL(….. DEFINE CHANNEL(….. DEFINE QLOCAL(…. …. ALTER QMGR REPOS(…. DEFINE CHANNEL(….. DEFINE CHANNEL(….. DEFINE QLOCAL(…. …. configure configure configure Uniform clusters currently leave the uniformity to you IBM MQ 9.1.2 CD
  • 25. Uniform Cluster Uniform cluster administration © 2019 IBM Corporation Push one set of configuration into each queue manager in the uniform cluster This will also add the concept of deploy time configuration to distributed MQ Create/start time ini and MQSC configuration ingestion Extended insert expansion support AutoCluster: Type=Uniform ClusterName=UNIDEMO DEFINE CHANNEL(….. DEFINE QLOCAL(…. …. deploy IBM MQ 9.1.4 CD
  • 26. 28 Simplified setup for Uniform clusters TuningParameters: UniformClusterName=UNIDEMO AutoCluster: Type=Uniform ClusterName=UNIDEMO The mechanism for creating a Uniform Cluster has changed: • New Dedicated qm.ini Stanza and attributes. IBM MQ 9.1.2 CD IBM MQ 9.1.4 CD
  • 29. © 2019 IBM Corporation31 Managing channel CipherSpecs Making it easier to keep up-to-date with ever changing ciphers, simplifying migration Rather than needing to match the CipherSpec on both ends of a channel, MQ 9.1.1 CD (all platforms) introduced ANY_TLS12 and MQ will negotiate the strongest CipherSpec available to both ends For 9.1.1, the distributed platforms also added the ability to whitelist exactly which CipherSpecs a queue manager will accept CipherSpec A CipherSpec ANY CipherSpec ANY CipherSpec A IBM MQ 9.1.1 CD
  • 30. 32 In 9.1.1 we added capability to provide a custom list of support CipherSpecs: • Can be used to re-enable deprecated CipherSpecs • Can be used to disable CipherSpecs not allowed by company policy. Controlling enabled Ciphers QM1 SSL: AllowedCipherSpecs=ECDHE_ECDSA_AES_128_CBC_SHA256, ECDHE_RSA_AES_256_CBC_SHA384, …
  • 31. 33 TLS 1.3 Support TLS 1.3 communication is available in: • Queue Manager to Queue Manager communications • C Clients with local bindings • C Clients with network connections Support for 5 new TLS 1.3 CipherSpecs Ability to enable/disable TLS 1.3 TLS 1.3 support is dependant on the cryptographic provider QM1 QM2 C Clients .NET / XMSJava/JMS Planned for a future update In future continuous delivery (CD) releases, IBM intends to deliver MQ for z/OS support for the TLS 1.3 cryptographic protocol where it is available by the z/OS operating system
  • 32. 34 New Alias CipherSpecs 4 new Alias CipherSpecs: • ANY • ANY_TLS13 • ANY_TLS12_OR_HIGHER • ANY_TLS13_OR_HIGHER Allows automatic support of new Ciphers in higher protocol versions. Recommended to set on the server and use Client for fine grained control: e.g. ANY set on SVRCONN CHANNEL. TLS_RSA_WITH_AES_128_CBC_SHA256 set on Client. TLS 1.0 Cipher TLS 1.2 Cipher 1 TLS 1.2 Cipher 2 TLS 1.3 Cipher 1 TLS 1.3 Cipher 2 … Future Ciphers … ANY ANY_TLS13 ANY_TLS12_OR_HIGHER ANY_TLS13_OR_HIGHER ANY_TLS12
  • 33. 35 New Alias CipherSpecs 4 new Alias CipherSpecs: • ANY • ANY_TLS13 • ANY_TLS12_OR_HIGHER • ANY_TLS13_OR_HIGHER Allows automatic support of new Ciphers in higher protocol versions. Recommended to set on the server and use Client for fine grained control: e.g. ANY set on SVRCONN CHANNEL. TLS_RSA_WITH_AES_128_CBC_SHA256 set on Client. TLS 1.0 Cipher TLS 1.2 Cipher 1 TLS 1.2 Cipher 2 TLS 1.3 Cipher 1 TLS 1.3 Cipher 2 … Future Ciphers … ANY ANY_TLS13 ANY_TLS12_OR_HIGHER ANY_TLS13_OR_HIGHER ANY_TLS12
  • 34. 36 New Alias CipherSpecs 4 new Alias CipherSpecs: • ANY • ANY_TLS13 • ANY_TLS12_OR_HIGHER • ANY_TLS13_OR_HIGHER Allows automatic support of new Ciphers in higher protocol versions. Recommended to set on the server and use Client for fine grained control: e.g. ANY set on SVRCONN CHANNEL. TLS_RSA_WITH_AES_128_CBC_SHA256 set on Client. TLS 1.0 Cipher TLS 1.2 Cipher 1 TLS 1.2 Cipher 2 TLS 1.3 Cipher 1 TLS 1.3 Cipher 2 … Future Ciphers … ANY ANY_TLS13 ANY_TLS12_OR_HIGHER ANY_TLS13_OR_HIGHER ANY_TLS12
  • 35. 37 New Alias CipherSpecs 4 new Alias CipherSpecs: • ANY • ANY_TLS13 • ANY_TLS12_OR_HIGHER • ANY_TLS13_OR_HIGHER Allows automatic support of new Ciphers in higher protocol versions. Recommended to set on the server and use Client for fine grained control: e.g. ANY set on SVRCONN CHANNEL. TLS_RSA_WITH_AES_128_CBC_SHA256 set on Client. TLS 1.0 Cipher TLS 1.2 Cipher 1 TLS 1.2 Cipher 2 TLS 1.3 Cipher 1 TLS 1.3 Cipher 2 … Future Ciphers … ANY ANY_TLS13 ANY_TLS12_OR_HIGHER ANY_TLS13_OR_HIGHER ANY_TLS12
  • 36. 38 TLS Handshake Transcript GSKit can be asked to provide a transcript of a TLS handshake • We will write this to trace: • Only written if trace is running • {Default} Only if TLS Handshake fails • Output to the amqrmppa or client application trace. QM1QM C Clients TLS Handshake Handshake transcript Handshake transcript
  • 37. © 2019 IBM Corporation40 Advanced Message Security End-to-end application-to-application encryption may give you the highest level of security, but it’s not always possible to use. For example, where the applications are not AMS enabled or where the originators or recipients of the messages are outside of your domain encrypted Application to application App App
  • 38. © 2019 IBM Corporation41 Advanced Message Security End-to-end application-to-application encryption may give you the highest level of security, but it’s not always possible to use. For example, where the applications are not AMS enabled or where the originators or recipients of the messages are outside of your domain MQ on Distributed has always had client level interception to apply AMS policies once messages reach or leave their first queue manager encrypted Queue manager entry App App
  • 39. © 2019 IBM Corporation42 Advanced Message Security End-to-end application-to-application encryption may give you the highest level of security, but it’s not always possible to use. For example, where the applications are not AMS enabled or where the originators or recipients of the messages are outside of your domain MQ on Distributed has always had client level interception to apply AMS policies once messages reach or leave their first queue manager MQ 9.1.3 on z/OS adds the ability to apply those policies at a queue manager-to-queue manager boundary. This enables the use of AMS within one domain without affecting another There is a statement of direction for adding this function on distributed platforms IBM MQ Advanced 9.1.3 CD z/OS encrypted Organizational boundary App App ASPOLICY REMOVE New sender and receiver channel property, SPLPROT controls the use of AMS policies for inbound and outbound messages
  • 40. 43 Data Set Encryption Page Sets Active Logs QM Disk Read/Write Encryption Policy Data Set Encryption Support for Z Data Set encryption has been extended. Previously only the following MQ data sets could be protected: • BSDS • CSQINP • Archive Logs Now, allows the encryption of data contained in active logs and page sets.
  • 41. 44 Data set encryption: what about AMS? AMS and data set encryption are complementary technologies. For some scenarios dataset encryption will be enough, for others AMS, or AMS plus dataset encryption will be needed © 2019 IBM Corporation Application B Application A Channels IBM MQ system Queue Manager Queue Manager TLS Dataset encryption CF Encryption AMS Protected on the network Protected on disk Protected in qmgr/chinit memory Protected in CF Protected end to end Transparent to application *** IBM MQ 9.1.4+ CD z/OS NB: AMS is more efficient than data set encryption but can be more complicated to configure
  • 42. IBM MQ ??? All Platforms Statement of direction In future continuous delivery (CD) releases, IBM intends to deliver MQ for z/OS support for the TLS 1.3 cryptographic protocol where it is available by the z/OS operating system The next Long Term Support (LTS) release of IBM MQ and IBM MQ Appliance will be the last to provide SSL v3 and TLS 1.0 support. IBM intends to remove support in a future CD release © 2019 IBM Corporation SSL TLS 1.0 TLS 1.2 TLS 1.3
  • 44. © 2019 IBM Corporation47 MQIPT updates The MQ Internet Pass Thru allows messaging solutions to be implemented to remote sites over the internet Provides an MQ aware proxy which can optionally be configured for HTTPS tunneling MQIPT used to be provided via support pack MS81 From 9.1.4 MS81 will be provided on FixCentral and will benefit from improved currency -Updated to Java 8 -Old SSL/TLS protocols disabled -TLS 1.2 supported MS81 will reach EOS in April next year IBM MQ 9.1.4 CD
  • 45. 48 MQIPT HSM Support MQIPT can now support PKCS#11 HSM devices. Requires one side of the communication to be a MQ Advanced Queue Manager Queue Manager Queue Manager Queue Manager Queue Manager MQIPT PKCS#11
  • 46. 49 Highly available MFT agents Queue Manager Queue Manager MFTAgentMFTAgent Queue Manager Queue Manager MFTAgentMFTAgent
  • 47. 50 IBM MQ Classes for .NET and XMS .NET Standard in NuGet repo IBMMQDotnetClient amqmdnetstd.dll IBMXMSDotnetClient amqmdnetstd.dll amqmxmsstd.dll .NET Application Developer
  • 48. 51 New support for the IBM MQ Bridge to blockchain
  • 49. 52 Use of Aspera gateway streaming for IBM MQ messages Statement of Direction: Extend FASP.io Gateway entitlement to MQ Advanced for z/OS VUE. MQ Advanced and MQ Appliance queue managers are entitled to connect to the FASP.io Gateway wherever it is deployed. Aspera / FASP.io Accelerates/improves data transport of any existing desktop/server or server/server TCP-based workflows New FASPv4 protocol • Lightning speed regardless of the distance and network conditions • Bidirectional • Single UDP port and DTLS
  • 50. 53 Use of Aspera gateway streaming for IBM MQ messages Statement of Direction: Extend FASP.io Gateway entitlement to MQ Advanced for z/OS VUE. MQ Advanced and MQ Appliance queue managers are entitled to connect to the FASP.io Gateway wherever it is deployed. Entitled users can obtain the gateway from Passport Advantage for use on x86-64 Linux environments
  • 51. 54 OpenShift support for the IBM MQ Advanced certified container image Previously to run IBM MQ Certified Container on Red Hat OpenShift you required IBM Cloud Private IBM MQ Certified Container now supports OpenShift native deployments.
  • 52. New MQ RFE process Steps • RFE gets submitted against MQ • RFE gets reviewed by development team • RFE gets declined if deemed to be something that we would never do • RFE gets returned as a defect if it should be addressed by raising a case • If the RFE is valid, but is unlikely to be delivered in the next year or so it gets declined • Otherwise RFE is an uncommitted candidate • Some of the RFEs get delivered in an MQ release © 2019 IBM Corporation55 https://developer.ibm.com/messaging/2019/10/21/reviewing- the-mq-rfe-request-for-enhancements-process/
  • 55. 58 Notices and disclaimers Copyright © 2017 by International Business Machines Corporation (IBM). No part of this document may be reproduced or transmitted in any form without written permission from IBM. U.S. Government Users Restricted Rights — use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM. Information in these presentations (including information relating to products that have not yet been announced by IBM) has been reviewed for accuracy as of the date of initial publication and could include unintentional technical or typographical errors. IBM shall have no responsibility to update this information. This document is distributed “as is” without any warranty, either express or implied. In no event shall IBM be liable for any damage arising from the use of this information, including but not limited to, loss of data, business interruption, loss of profit or loss of opportunity. IBM products and services are warranted according to the terms and conditions of the agreements under which they are provided. IBM products are manufactured from new parts or new and used parts. In some cases, a product may not be new and may have been previously installed. Regardless, our warranty terms apply.” Any statements regarding IBM's future direction, intent or product plans are subject to change or withdrawal without notice. Performance data contained herein was generally obtained in a controlled, isolated environments. Customer examples are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual performance, cost, savings or other results in other operating environments may vary. References in this document to IBM products, programs, or services does not imply that IBM intends to make such products, programs or services available in all countries in which IBM operates or does business.
  • 56. 59 Notices and disclaimers Workshops, sessions and associated materials may have been prepared by independent session speakers, and do not necessarily reflect the views of IBM. All materials and discussions are provided for informational purposes only, and are neither intended to, nor shall constitute legal or other guidance or advice to any individual participant or their specific situation. It is the customer’s responsibility to insure its own compliance with legal requirements and to obtain advice of competent legal counsel as to the identification and interpretation of any relevant laws and regulatory requirements that may affect the customer’s business and any actions the customer may need to take to comply with such laws. IBM does not provide legal advice or represent or warrant that its services or products will ensure that the customer is in compliance with any law. Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products in connection with this publication and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products. IBM does not warrant the quality of any third-party products, or the ability of any such third-party products to interoperate with IBM’s products. IBM expressly disclaims all warranties, expressed or implied, including but not limited to, the implied warranties of merchantability and fitness for a particular, purpose. The provision of the information contained herein is not intended to, and does not, grant any right or license under any IBM patents, copyrights, trademarks or other intellectual property right.
  • 57. 60 Notices and disclaimers IBM, the IBM logo, ibm.com, Aspera®, Bluemix, Blueworks Live, CICS, Clearcase, Cognos®, DOORS®, Emptoris®, Enterprise Document Management System™, FASP®, FileNet®, Global Business Services®, Global Technology Services®, IBM ExperienceOne™, IBM SmartCloud®, IBM Social Business®, Information on Demand, ILOG, Maximo®, MQIntegrator®, MQSeries®, Netcool®, OMEGAMON, OpenPower, PureAnalytics™, PureApplication®, pureCluster™, PureCoverage®, PureData®, PureExperience®, PureFlex®, pureQuery®, pureScale®, PureSystems®, QRadar®, Rational®, Rhapsody®, Smarter Commerce®, SoDA, SPSS, Sterling Commerce®, StoredIQ, Tealeaf®, Tivoli® Trusteer®, Unica®, urban{code}®, Watson, WebSphere®, Worklight®, X- Force® and System z® Z/OS, are trademarks of International Business Machines Corporation, registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at: www.ibm.com/legal/copytrade.shtml.