Igor Solomatin, Author at Perficient Blogs
Blog

Posts by this Author

  • Topics
  • Industries
  • Partners

Explore

Topics

Industries

Partners

Igor Solomatin

Technical Architect

Graduated from San Francisco State University with a Bachelor of Science degree in Computer Science. Worked at IBM as a WebSphere Technical Specialist from 2005 to 2010. Proud to be a team member at Perficient since 2014!

LinkedIn Public Profile

Posts by this author:

Configuring MQTT on IBM MQ

September 27, 2019. Let’s talk about setting up MQTT in MQ v9.1.x. Remember that images are clickable for a sharper picture. Introduction Full name of MQTT is IBM MQ Telemetry v3 protocol, and it’s used for lightweight pub/sub between small footprint devices over unreliable networks. It uses TCP/IP as the backbone. Three Qualities of Service […]

Read more

How to Create and Configure SSL Key and Trust Stores Part 3/3

September 23, 2019. This post is the closing one in a multi-part series talking about setting up and configuring key and trust stores for IBM MQ and IBM Integration Bus. Windows Repository Configuration Today we will talk about adding and accessing the key stores on Windows. Windows is a whole different kingdom with its own […]

Read more

How to Create and Configure SSL Key and Trust Stores Part 2/3

This post is the second in a multi-part series talking about setting up and configuring key and trust stores for IBM MQ and IBM Integration Bus. The screenshots are clickable for a sharp image. At this point you should have your key stores and trust stores created and empty. The next step is creating a […]

Read more

How to Create and Configure SSL Key and Trust Stores Part 1/3

This post will be the first in a multi-part series talking about configuring various key stores and trust stores IBM MQ and IBM Integration Bus and populating them with certificates. General Information Key stores and trust stores are files in a proprietary format. Key stores hold certificates that an application sends across during the SSL […]

Read more

Protecting the MQCSP structure

Problem Description As I mentioned in one the previous posts: MQCSP structures, containing the user ID and password of the user being authenticated, are sent in the clear across the network, if you’re not using TLS to encrypt your traffic. For example, if you setup LDAP for authentication (as described in the previous post), start […]

Read more

ChlauthEarlyAdopt and AdoptContext rules behavior in MQ v9.1+

August 8, 2019. Due to a security vulnerability, IBM changed the order of operations when authenticating users in v9.1. This is important if you setup your security on a prior version and then migrate to v9.1. Your security rules might stop working as you intended. In this post, we will talk about “channel early adoption” […]

Read more

How to configure IBM MQ authentication: OS and LDAP

IBM MQ user authentication An IBM MQ queue manager can be configured to authenticate connecting users. But it does not keep a list of users or their passwords. That is the functionality that MQ leaves to external resources. There are two options you can choose from: Authenticate using the operating system Authenticate using a Lightweight […]

Read more

Working with MQ Channel Authentication Records

July 26, 2019. This week we’ll look at how we can improve the security of a queue manager by using MQ channel authentication records. Introduction Many MQ admins think that channel authentication is complicated to setup and requires a lot of micro-management. I am going to show you that channel authentication is a great MQ […]

Read more

Turning on SSL for IIB web interface connections

July 19, 2019. Let’s take a look at turning on SSL for the IIB web interface connections. Prerequisites and Benefits First of all, you need to have your key and trust stores setup on the IIB integration node and the certificates loaded into them. Also, unlimited crypto libraries need to be installed on your IBM […]

Read more

Enabling TLS for IBM MQ Inter-cluster Communication

July 12, 2019 In this post, we will take a look at enabling TLS for IBM MQ inter-cluster communication. Enabling TLS on the MQ cluster is one of the easiest things you can do for the security of your MQ infrastructure. Prerequisites First of all, you need to have your key stores setup on all […]

Read more

Subscribe to the Weekly Blog Digest:

Sign Up