MQ for z/OS enhancements include a new MQ Console for web-based administration, MQ REST API for administration and messaging, improved Java support in CICS, a new MQ service provider for z/OS Connect, dataset and CF encryption, improved workload balancing for shared queues, and a simplified migration experience. MQ Advanced for z/OS VUE enhancements include AMS performance improvements, Managed File Transfer enhancements, enhanced Blockchain connectivity, and client connection flexibility.

1. 2018 IBM Systems
Technical University
What’s new in MQ 9.1 on z/OS?
z104075
—
Matt Leming
lemingma@uk.ibm.com
Architect, MQ for z/OS
Date: 8th-13th October, 2018

2. MQ sessions this week
Day Monday Tuesday Wednesday Thursday Friday
9:00
z104074: Using MQ for z/OS shared
queues to gain high availability
301
Mayur Raja
z104071: End to End MQ Security
Diplomat 2
Mayur Raja
z104073: MQ in the Cloud
Diplomat 3
Mayur Raja
10:15
z104061: Experience z/OS Connect EE
firsthand
217
Mitch Johnson
z104075: Using z/OS Connect with MQ
and CICS
Diplomat 2
Matthew Leming
z104070: The MQ journey to date and
what's new in MQ V9.1
Diplomat 3
Matthew Leming
11:30
z104070: The MQ journey to date and
what's new in MQ V9.1
307
Matthew Leming
z103789: MQ for z/OS – SMF
301
Carolyn Elkins
z103788: IBM MQ for z/OS: How
healthy are my z/OS queue managers?
305
Carolyn Elkins
z104061: Experience z/OS Connect EE
firsthand
217
Mitch Johnson
1:45 PM
3:15 PM
z104306: IBM MQ for z/OS - Security
and REST hands-on lab - Part 1
217
Mitch Johnson
4:30 PM
z104068: The MQ Console and REST
APIs
Diplomat 2
Matthew Leming
z104324: IBM MQ for z/OS - Security
and REST hands-on lab - Part 2
217
Mitch Johnson
2

3. Announcement materials
Business value of MQ
MQ for z/OS enhancements
MQ Advanced for z/OS VUE
enhancements
3
25

4. Announcement materials
Business value of MQ
MQ for z/OS enhancements
MQ Advanced for z/OS VUE
enhancements
4
25

5. 5
Announcement materials
zGA on 10th August 2018
Announcement Letters (US):
IBM MQ for z/OS V9.1
IBM MQ Advanced for z/OS VUE V9.1
Blogs:
IBM MQ 9.1 and IBM Appliance M2002 are
announced..
MQ9.1 delivers the latest features in a Long
Term Support release..
Performance Report: https://ibm-
messaging.github.io/mqperf/MQ%20for%20
zOS%20V910%20Performance.pdf
Best of breed hardware
Best of breed messaging
Strong integration with all other major
software offerings on z/OS
Built to exploit the strength of the underlying platform

6. Announcement materials
Business value of MQ
MQ for z/OS enhancements
MQ Advanced for z/OS VUE
enhancements
6
25

7. Mix and Match
Both are available under
the same license.
Both can interoperate, just
like any previous version
of MQ.
Continuous Delivery
New CD versions of MQ
are released
approximately every four
months, incrementally
introducing new product
capabilities.
Intended for those that
can continually integrate.
Long Term Support
Approximately every two
years a new LTS version is
released, rolling up many
of the CD capabilities into
a release with 5+3
support attached.
Required by those looking
for fixed function.
In 2016 MQ
introduced a dual Long
Term Support and
Continuous Delivery
model
IBM MQ: long term support and continuous delivery
The function delivered in the 9.0.x CD releases made
available as a long term support release, 9.1.0 LTS.
2017 2018
S V9.0.1 CD V9.0.2 CD V9.0.3 CD V9.0.4 CD V9.0.5 CD
liance MQ on IBM Cloud
2019 2020
V9.1 LTS V9.1.1 CD V9.1.2 CD V9.1.3 CD …
7

8. Precise
IBM MQ is the solution for
business critical messaging
Your bank transfers complete without losing
your money, with all of the worlds top 50
banks using IBM MQ*
The world depends on reliable, secure
messaging and 85% of the fortune 100
depend on IBM MQ*
ScalableSimple
*Correct as of end 2016 against http://www.relbanks.com/worlds-top-banks/assetsand http://beta.fortune.com/fortune500/list/ 8
25

9. Secure
ReliableConnected
IBM MQ is the solution for
business critical messaging
*Correct as of end 2016 against http://www.relbanks.com/worlds-top-banks/assetsand http://beta.fortune.com/fortune500/list/
Your bank transfers complete without losing
your money, with all of the worlds top 50
banks using IBM MQ*
The world depends on reliable, secure
messaging and 85% of the fortune 100
depend on IBM MQ*
9
25

10. Run IBM MQ in any
location or cloud
exactly as you
need it
On-premise, software
and the MQ Appliance
Run it yourself in any
cloud, public or private
Let IBM host it for you
with its new managed
MQ service in IBM
Cloud
Private cloud
AWSAWS
AWSAzure
AWS
…
Linux
Windows
Solaris
HPE
AIX
IBMi
IBM Z
Appliance
IBM Cloud Private
10
25

11. Announcement materials
Business value of MQ
MQ for z/OS enhancements
MQ Advanced for z/OS VUE
enhancements
11
25

12. MQ for z/OS enhancements
MQ Console for web-based
administration
MQ REST API for administration &
messaging
Learn MQ
Improved Java support in CICS
MQ service provider for IBM z/OS
Connect Enterprise Edition
Dataset and CF encryption
Improved workload balancing options
for shared queues
Simplified migration experience
12
25

13. MQ Console feature for web-based
administration
Point a browser at an MQ installation to allow
configuration of your MQ resources, as well
as basic validation by sending/receiving
messages
No need to install MQ Explorer on multiple
machines
Easily share dashboard configuration
between users, to allow you to get going
quickly
Currently provides a subset of the
capabilities of MQ Explorer
13
Also see z104068: The MQ Console and REST APIs,
and z104306 + z104324 for labs

14. HTTPS POST:
https://host:port/ibmmq/v1/admin/qmgr/QM1/queue
{
“name”: ”QUEUE.1”,
“type”: ”local”,
“cluster”: {
“name”: “CLUSTER1” }
}
HTTP Response: 201
JSON payload when
defining/updating objects
URL represents target
object for command
HTTP response indicates
success/failure
HTTPS GET:
https://host:port/ibmmq/v1/admin/qmgr
{
“qmgr”: [
{
“name”: “QMTEST01”,
“state”: “running”
},
{
“name”: “QMTEST02”,
“state”: “ended”
}
]
}
JSON payload returned
when querying
MQ REST API for administration
MQ has supported scripting and programmatic
administration for many years, but it requires MQ
knowledge and tooling
MQ has been increasing support for a RESTful
administrative API to enable much of what’s
available today with MQSC and PCF. But in a more
intuitive way to many, using the URL and structured
JSON payloads to define the operations
Being over HTTPS also enables the embedding of
MQ administrative operations into many
environments and tools that previously would not
be possible
Evolution of the REST API will continue in 9.1.x CD
14

15. HTTPS POST:
https://host:port/ibmmq/v1/messaging/qmgr/QM1/queue/LQ1
<order>
<item>A loaf of bread</item>
<item>A piece of meat</item>
</order>
HTTP Response: 201
HTTPS DELETE:
https://host:port/ibmmq/v1/messaging/qmgr/QM1/queue/LQ1
{
“attribute1”: “value1”,
“object1” : {
“attribute2”: “value2”
}
}
MQ REST API for messaging
A simple light-weight, built-in, REST API for
messaging
Doesn’t require installation of an MQ client
Allows you to build messaging into your
applications regardless of where they run, or the
language they are written in
Currently supports point-to-point text based
messaging
Evolution of the messaging REST API will continue
in 9.1.x CD
Replaces the HTTP bridge which has now been
removed
15
Send a message
Receive a message
URL represents target
queue
HTTP response indicates
success/failure

16. 16
New web server
Optional ZFS feature containing a web server
(mqweb)
Runs on a bundled version of WebSphere Liberty
Profile
Enables both the MQ Console and REST APIs
Simple configuration using xml
Samples provided to get started quickly
Commands provided to simplify some
configuration
Flexible role based security, can reuse existing
RACF configuration
MSTR
PCF
WebSphere Liberty
MQI
MQ
Console
REST API
mqweb
server
MQ installation

17. LearnMQ
Finding it hard to get
developers started
with MQ?
Point them to:
developer.ibm.com/
messaging/learn-mq
Totally new to MQ?
Learn the basics
Step-by-step guide to
getting up and running
with MQ
Tutorials on building
your applications
© 2018 IBM Corporation
17

18. Improving Java support within CICS
MQ V8 added support for MQ JMS in CICS
(standalone Java environment)
CICS now provides embedded Liberty server – JEE
resources can exploit CICS resources
Allows CICS Liberty to use MQ resource adapter
just like normal Liberty
Run existing Liberty messaging apps such as MDBs
inside CICS
Connections to MQ supported using either client or
bindings mode
Requires CICS 5.3 + PI58375 + MQ 9.1.0 resource
adapter, or one from an earlier CD release (9.0.1
and later)
CICS
Liberty
JMS
MQ
resource
adaptor
MSTR
(local Z)
CHIN
(remote or
local Z)
External
MQ
(e.g. Linux)
18
MQ JMS in CICS Liberty Profile

19. CICS
IMS
DB2
MQ
…
z/OS
Connect EE
Expose RESTful APIs to z Systems without writing any code.
z/OS Connect EE provides a single, RESTful entry point to your z systems assets and data
Enables reuse of existing assets, exposing them to environments where it is natural to use REST
Those new consumers do not need to understand or be aware of the specifics of the subsystems
No changes to subsystems required, all handled via configuration
Service ProvidersAlso see:
z104075: Using z/OS Connect with MQ and CICS
z104061: Experience z/OS Connect EE firsthand - lab
z103938: REST easy with z/OS Connect EE

20. New MQ service provider for IBM z/OS
Connect Enterprise Edition
Free of charge z/OS Connect service provider that
allows existing services that are fronted by MQ to
be accessed via a RESTful
front end
Supported with MQ 8
and onwards
Shipped with MQ 9.1.0
(plus earlier CD releases)
or obtain from FixCentral
Clients need have no
knowledge of MQ
MQ information hidden by configuration, but
advanced users can specify some MQ attributes
using HTTP headers
zCEE
20
Existing MQ environment, CICS and IMS consuming
data via MQI, driven by batch or WAS environments
Expose bespoke REST APIs for particular MQ
resources to new consumers, who don’t understand
COBOL copybooks / PL/I. Backend is hidden and
invoked using JSON / HTTP. No changes to batch etc.

21. 22
CF encryption
z/OS 2.3 added support for encryption of data sent to
CF list and cache structures
Encryption protects data both inflight, and when at rest
in the structure
Encryption/decryption is performed by z/OS LPARs
connected to the CF, not the CF itself
Requires a CryptoExpress coprocessor to use!
Entirely transparent to MQ, and fully supported
Measurements in the lab have shown that using CF
encryption with MQ has a low overhead, less than 6%
Data at Rest
Integrated Crypto
Hardware
Clustering
Network
Data in Use
1
0
1
Pervasive encryption with IBM z Systems

22. Improved workload balancing options
for shared queues
CF list monitoring is used to monitor the state of
list structures containing shared queues
When a queue's depth transitions from
zero to non-zero, the CF notifies queue managers
in the queue sharing group
The queue managers might perform a number of
actions, including notifying trigger monitors that
are using TRIGGER(FIRST), or applications which
are performing a get-wait
All queue managers notified at the same time
which causes a race for the messages and in
some cases workload skewing or a large number
of empty gets
MQ
MQMQ
MQPUT
NOTIFY
NOTIFY
23
Also see z104074: Using MQ for z/OS shared queues
to gain high availability

23. Improved workload balancing options
for shared queues
z/OS 2.3 introduces a new CFRM
attribute: KEYRNOTIFYDELAY
Can be used to notify one queue
manager earlier than the others which
might reduce skewing/empty gets
If the target queue manager doesn’t
action the notify in the time period, in
microseconds, specified by the attribute,
all other queue managers are notified
Very dependent on environment and
workload. Your mileage may vary!
https://developer.ibm.com/messaging/2018/06/22/z-os-v2r3-new-cfrm-policy-attributes-impact-mq/
STRUCTURE
NAME(QSG1STRUCT1)
SIZE(1024M)
KEYRNOTIFYDELAY(500)
...
24

24. 25
Simplified migration experience
OPMODE removed at 9.1.0
Recompiling zparm at 9.1.0 with OPMODE specified
will generate a warning. But old zparm modules can
be used
OPMODE output removed from the DIS SYSTEM
command
New message indicates whether backwards
migration is support or not, and if it is where you
can migrate back to
Backwards migration always supported to 8.0.0 or
9.0.0 if migration PTFs applied
PI95928 for 8.0.0
PI95939 for 9.0.0
CSQY040I !MQ21 Backwards migration not supported
CSQY039I !MQ21 Backwards migration is supported to
Version 9.0.0
Reminder: backwards migration is not supported in
continuous delivery.
I.e. you can go from 9.0.5 to 9.1.0 but you can’t go back
Similarly you can go from 9.0.0 to 9.0.5 but you can’t go
back

25. 26
qTypes
There will be two qType APARs. Numbers are:
PH02328
PH02329
We recommend that you apply these APARs as
soon as they become available and before going
into production with 9.1.0
25

26. Announcement materials
Business value of MQ
MQ for z/OS enhancements
MQ Advanced for z/OS VUE
enhancements
27
25

27. IBM MQ Advanced for z/OS Value Unit Edition
IBM MQ Advanced
Message Security for z/OS
IBM MQ for z/OS
The Richest Set of z/OS Messaging Capabilities in a Single, Simple to Deploy Offering
Connector Pack
IBM MQ Managed
File Transfer for z/OS
IBM MQ Advanced for z/OS Value Unit Edition
Provides end-to-end encryption of message contents to protect
sensitive data from all forms of intrusion, attack or accidental
disclosure, and with no need for application change
Provides reliable, secure and auditable file transfer that reduces
the need for manual processes, and management tools that help
reduce wasted time when dealing with failure analysis
Enables the secure, reliable exchange of business data across
applications, systems and services on-premises, in the Cloud, or
in Hybrid environments
Enables applications and systems to participate in a Blockchain network via MQ,
performing CRUD operations on Hyperledger Fabric Blockchain running in IBM Cloud
or running locally

28. MQ Advanced for z/OS VUE
enhancements
AMS performance improvements
Managed File Transfer enhancements
Enhanced Blockchain connectivity
Client connection flexibility
29
25

29. MQ Advanced for z/OS VUE delivers
pervasive encryption
Apply end-to-end encryption to existing
messaging infrastructure easily and with
no application changes
Authenticate and protect messages
across the enterprise making audit
simple
Reduce time and skills needed to comply
with aspects of common security
standards
Detect and remove rogue messages
New Confidentiality option for
encryption has minimal performance
impact
30
Application B
Application A
Channels
IBM MQ system
Queue Manager
Queue Manager
Advanced Message Security (AMS) protects
data at rest, in-flight and in-memory to
guarantee privacy of message contents

30. A cost comparison between version 9.1.0 and 9.0.0 shows:
Integrity: 37% of the equivalent version 9.0.0 measurement
Privacy: 44% of the equivalent version 9.0.0 measurement
Confidentiality: 17-32% of the equivalent version 9.0.0 measurements (depending on the key reuse value)
Significant improvement in performance when applying AMS policies

31. Move Data and Files with MQ Advanced
for z/OS VUE
32
Managed File Transfer (MFT) enables a
consistent approach to transporting application
data and file data as messages
Channels
MQ Advanced QMs
Logging
component
MFT Agent
Application BApplication A
MFT Agent
Unlimited deployments
of MQ MFT Agents when
connecting them to MQ
Advanced Queue
Managers
Performs the fundamental file transfer function of sending
and receiving files from the local system
Installs a file transfer agent on MQ server with additional
capabilities
MFT Service:
MFT Agent:
Benefits:
Reliability of delivery
Increased security of system and data
Integrated management and recovery
 File-to-file
 File-to-message
 Message-to-file
How:

32. Managed File Transfer Enhancements
Create a “File Hub” using simplified MFT Agent
connectivity
MFT agents deployed wherever files are to be
sourced or delivered
No requirement for a local z/OS queue manager -
choose where to handle file workload
Files transferred across the MQ network between
local and remote agents
Reduce the number of queue managers required -
simplified topology for easier administration
MFT file logger can now use client mode to
connect to the coordination queue manager
Monitor current MFT transfers via the MQ REST
API and query the status of MFT agents
33
MQ Adv VUE
MFT
Agent
MFT
Agent
MFT
Agent
LPAR 1 LPAR 2
File Hub
(LPAR 3)

33. Blockchain: holds details of
all vehicles for country
Manufacturer
adds vehicles
Recycle/Scrap
removes
vehicles
Dealer:
Registers
vehicle,
updates
ownership
Importer: adds
vehicles
Tax
Record
s
Tax Due
process
Send
Reminder
process
Reminder
Excise Authority`
Query current
Owner
Modified Hybrid Business Process
MQ
Blockchain requires connectivity for data sharing
Parties in the business network need to exchange data often held in Systems of Record
Enable a range of different
applications and systems
to send updates to a
Blockchain network
Ensure data integrity
following changes to
shared assets
Transport critical
business data securely
and reliably
Requirements…
34

34. IBM MQ
Bridge to
Blockchain
Connect to Blockchain with MQ Advanced for z/OS VUE
Deploy IBM MQ Bridge to Blockchain to enable applications and systems to participate
Bridge allows an MQ application to connect to Hyperledger Composer
Blockchain running in IBM Cloud or running locally
Utilise request-reply MQ messages to query information from Blockchain (e.g.
what is the value of the balance on this account)
Use MQ to drive create, read, update and delete operations on Blockchain-
managed assets
No need to understand the ledger-specific APIs, configuration or controls
Connection to Queue Manager
---------------------------
Queue Manager : []MQ21
Bridge Input Queue :
[SYSTEM.BLOCKCHAIN.INPUT.QUEUE]
MQ Channel : []
MQ Conname : []
MQ CCDT URL : []
JNDI implementation class :
[com.sun.jndi.fscontext.RefFSContextFactory]
JNDI provider URL : []
MQ Userid : []MLEMING
MQ Password : []
User Identification
-------------------
Userid : []MLEMING
Password : []
API path for login : [auth/users/login] 35

35. 36
Run the IBM MQ bridge to Blockchain
on z/OS
The bridge can be run on USS and connect via
bindings to your z/OS queue manager
No need to install in an x86 Linux environment
Three step process to set up
1) Define necessary queues using CSQ4BCBQ
2) Generate configuration file in USS:
runmqbcb -o config.json
3) Run the bridge either in USS or using JCL:
CSQ4BCB sample provided

36. Client connection flexibility
Traditionally we have supported Java client
connections in JEE environments only (tWAS,
Liberty, and now CICS Liberty)
Support now added for client connections from
Java applications to MQ Advanced for z/OS VUE
queue managers running on other LPARs
Including AMS support for Java applications using
client connections
Allows you to have more flexibility when
setting up your MQ topologies
JMS
Client
LPAR 1
MQ Adv VUE
LPAR 3
Java
Client
LPAR 2
37

37. Announcement materials
Business value of MQ
MQ for z/OS enhancements
MQ Advanced for z/OS VUE
enhancements
38
25

38. Thank you!
Please complete the Session
Evaluation!

39. Notices and disclaimers
• © 2018 International Business Machines Corporation.
No part of this document may be reproduced or transmitted in
any form without written permission from IBM.
• U.S. Government Users Restricted Rights — use,
duplication or disclosure restricted by GSA ADP Schedule
Contract with IBM.
• Information in these presentations (including information relating
to products that have not yet been announced by IBM) has been
reviewed for accuracy as of the date of initial publication
and could include unintentional technical or typographical
errors. IBM shall have no responsibility to update this
information. This document is distributed “as is” without any
warranty, either express or implied. In no event, shall IBM
be liable for any damage arising from the use of this
information, including but not limited to, loss of data,
business interruption, loss of profit or loss of opportunity.
IBM products and services are warranted per the terms and
conditions of the agreements under which they are provided.
• IBM products are manufactured from new parts or new and
used parts.
In some cases, a product may not be new and may have been
previously installed. Regardless, our warranty terms apply.”
• Any statements regarding IBM's future direction, intent or
product plans are subject to change or withdrawal without
notice.
• Performance data contained herein was generally obtained in a
controlled, isolated environments. Customer examples are
presented as illustrations of how those
• customers have used IBM products and the results they may have
achieved. Actual performance, cost, savings or other results in
other operating environments may vary.
• References in this document to IBM products, programs, or
services does not imply that IBM intends to make such products,
programs or services available in all countries in which
IBM operates or does business.
• Workshops, sessions and associated materials may have been
prepared by independent session speakers, and do not
necessarily reflect the views of IBM. All materials and discussions
are provided for informational purposes only, and are neither
intended to, nor shall constitute legal or other guidance or advice
to any individual participant or their specific situation.
• It is the customer’s responsibility to insure its own compliance
with legal requirements and to obtain advice of competent legal
counsel as to the identification and interpretation of any
relevant laws and regulatory requirements that may affect the
customer’s business and any actions the customer may need to
take to comply with such laws. IBM does not provide legal advice
or represent or warrant that its services or products will ensure
that the customer follows any law.

40. Notices and disclaimers
continued
• Information concerning non-IBM products was obtained from the suppliers
of those products, their published announcements or other publicly
available sources. IBM has not tested those products about this publication
and cannot confirm the accuracy of performance, compatibility or any other
claims related to non-IBM products. Questions on the capabilities of non-
IBM products should be addressed to the suppliers of those products.
IBM does not warrant the quality of any third-party products, or the ability of
any such third-party products to interoperate with IBM’s products. IBM
expressly disclaims all warranties, expressed or implied, including but
not limited to, the implied warranties of merchantability and fitness for
a purpose.
• The provision of the information contained herein is not intended to, and
does not, grant any right or license under any IBM patents, copyrights,
trademarks or other intellectual property right.
• IBM, the IBM logo, ibm.com and [names of other referenced
IBM products and services used in the presentation] are
trademarks of International Business Machines Corporation,
registered in many jurisdictions worldwide. Other product and
service names might be trademarks of IBM or other
companies. A current list of IBM trademarks is available on
the Web at "Copyright and trademark information" at:
www.ibm.com/legal/copytrade.shtml.
• .