Igor Solomatin – Technical Architect

September 27, 2019. Let’s talk about setting up MQTT in MQ v9.1.x. Remember that images are clickable for a sharper picture. Introduction Full name of MQTT is IBM MQ Telemetry v3 protocol, and it’s used for lightweight pub/sub between small footprint devices over unreliable networks. It uses TCP/IP as the backbone. Three Qualities of Service […]

September 23, 2019. This post is the closing one in a multi-part series talking about setting up and configuring key and trust stores for IBM MQ and IBM Integration Bus. Windows Repository Configuration Today we will talk about adding and accessing the key stores on Windows. Windows is a whole different kingdom with its own […]

This post is the second in a multi-part series talking about setting up and configuring key and trust stores for IBM MQ and IBM Integration Bus. The screenshots are clickable for a sharp image. At this point you should have your key stores and trust stores created and empty. The next step is creating a […]

This post will be the first in a multi-part series talking about configuring various key stores and trust stores IBM MQ and IBM Integration Bus and populating them with certificates. General Information Key stores and trust stores are files in a proprietary format. Key stores hold certificates that an application sends across during the SSL […]

Problem Description As I mentioned in one the previous posts: MQCSP structures, containing the user ID and password of the user being authenticated, are sent in the clear across the network, if you’re not using TLS to encrypt your traffic. For example, if you setup LDAP for authentication (as described in the previous post), start […]

August 8, 2019. Due to a security vulnerability, IBM changed the order of operations when authenticating users in v9.1. This is important if you setup your security on a prior version and then migrate to v9.1. Your security rules might stop working as you intended. In this post, we will talk about “channel early adoption” […]

IBM MQ user authentication An IBM MQ queue manager can be configured to authenticate connecting users. But it does not keep a list of users or their passwords. That is the functionality that MQ leaves to external resources. There are two options you can choose from: Authenticate using the operating system Authenticate using a Lightweight […]

July 26, 2019. This week we’ll look at how we can improve the security of a queue manager by using MQ channel authentication records. Introduction Many MQ admins think that channel authentication is complicated to setup and requires a lot of micro-management. I am going to show you that channel authentication is a great MQ […]

July 19, 2019. Let’s take a look at turning on SSL for the IIB web interface connections. Prerequisites and Benefits First of all, you need to have your key and trust stores setup on the IIB integration node and the certificates loaded into them. Also, unlimited crypto libraries need to be installed on your IBM […]

July 12, 2019 In this post, we will take a look at enabling TLS for IBM MQ inter-cluster communication. Enabling TLS on the MQ cluster is one of the easiest things you can do for the security of your MQ infrastructure. Prerequisites First of all, you need to have your key stores setup on all […]