Troubleshooting
Problem
Environment
Resolving The Problem
- What TLS channel problem did you observe on the system?
- What time did the TLS channel problem start and when did it stop?
- Which specific channels and certificates are involved in the problem?
- Keystore Location and Permissions
- UNIX, Linux and AIX Command Line:
ls -la <DIRECTORY OF KEYSTORE>
-
Windows Powershell Command:
Get-Acl <DIRECTORY OF KEYSTORE> | Format-List
- UNIX, Linux and AIX Command Line:
- Keystore Certificate Listing UNIX, Linux, AIX and Windows
runmqakm -cert -list -v -db <KEYSTORE FILE> -stashed
- Certificates Expired or Expiring in the next 90 Days
runmqakm -cert -list -expiry 90 -db <KEYSTORE NAME> -stashed
Step 1: Generate Data
If the TLS channel problem is reproducible or is happening right now, generate data to provide more information about the problem:
- Generate a trace of the queue manager when the TLS problem occurs:
Unless your support representatives inform you different the correct options for a queue manager SSL trace is -t all -t detail
- Generate MQ trace simultaneously at the other end of the channel, whether it is another queue manager or a client application:
Step 2: Collect Data
Collecting Data Automatically
If you are running IBM MQ V9.2, V9.1, V9.0 or V8.0, WebSphere MQ V7.5, V7.1.0.1 or later, or V7.0.1.8 or later collect data automatically with the runmqras command on both sides of the channel . Be sure to collect the runmqras defs and trace sections, and to specify your case number:
runmqras -section defs,cluster,trace -qmlist QMA -caseno TS001234567
Collecting IBM MQ Data Manually
-
If your system has more than one IBM MQ installation, use the setmqenv command to choose the one with the problem before proceeding:
Linux and UNIX
sh> . /path/to/mqm/bin/setmqenv -n InstallationX
Windows
C:\> "C:\Program Files\IBM\MQ\bin\setmqenv" -n InstallationX
-
Record the IBM MQ version and maintenance level on both sides of the channel. Alternatively, collect the IBM MQ data manually on both sides of the channel.
-
Record the operating system version and maintenance level on both sides of the channel.
-
Record the IP addresses and host names of the systems on both sides of the channel.
-
Save the IBM MQ configuration information, for example registry keys and ini files.
-
If your system has more than one IBM MQ installation, record your IBM MQ installation details:
Linux and UNIX
sh> dspmqinst > /tmp/dspmqinst.txt
Windows
C:\>dspmqinst > %TEMP%/dspmqinst.txt
-
Record the status of your queue managers:
Linux and UNIX
sh> dspmq -a > /tmp/dspmq.txt
Windows
C:\> dspmq -a > %TEMP%/dspmq.txt
IBM i command line
===> WRKMQM
IBM i Qshell
===> /QSYS.LIB/QMQM.LIB/DSPMQ.PGM -a > /tmp/dspmq.txt
-
Record the IBM MQ processes active on your system:
Linux and UNIX
sh> ps -ef | grep mq > /tmp/ps.txt
Windows
C:\> TASKLIST /V > %TEMP%/tasklist.txt
IBM i command line
===> WRKACTJOB SBS(QMQM)
IBM i Qshell
===> ps -ef | grep mq > /tmp/ps.txt
-
On WebSphere MQ V7.1 and later installations, use dmpmqcfg to record the queue manager configuration:
Linux and UNIX
sh> dmpmqcfg -m QMA >/tmp/QMA.config.txt
Windows
C:\> dmpmqcfg -mQMA>%TEMP%\QMA.config.txt
IBM i Qshell
===> /QSYS.LIB/QMQM.LIB/DMPMQCFG.PGM -mQMA > /tmp/QMA.config.txt
-
Otherwise, on IBM WebSphere MQ V7.0 and earlier installations, use runmqsc to record the queue manager configuration . If any command gives an error, carry on with the others:
DISPLAY QMGR ALL
DISPLAY Q(*) ALL
DISPLAY SUB(*) ALL
DISPLAY TOPIC(*) ALL
DISPLAY CHANNEL(*) ALL
DISPLAY SERVICE(*) ALL
DISPLAY PROCESS(*) ALL
DISPLAY LISTENER(*) ALL
DISPLAY NAMELIST(*) ALL
-
On all IBM MQ server installations, use runmqsc to record status information from the queue manager . If any command gives an error, carry on with the others:
DISPLAY PUBSUB ALL
DISPLAY QMSTATUS ALL
DISPLAY CHSTATUS(*) ALL
DISPLAY LSSTATUS(*) ALL
DISPLAY SVSTATUS(*) ALL
DISPLAY SBSTATUS(*) ALL
DISPLAY CONN(*) TYPE(*) ALL
DISPLAY QSTATUS(*) TYPE(QUEUE) ALL
DISPLAY QSTATUS(*) TYPE(HANDLE) ALL
DISPLAY TPSTATUS('#') TYPE(PUB) ALL
DISPLAY TPSTATUS('#') TYPE(SUB) ALL
DISPLAY TPSTATUS('#') TYPE(TOPIC) ALL
-
If your channel is having difficulty connecting, use your operating system tools to list network connections on both sides immediately before and after the connection attempt:
Displaying network connections on Linux and UNIX
sh> netstat -an
Displaying network connections on Windows
C:\>NETSTAT -AN
Displaying IPv4 and IPv6 network connections at the IBM i command line
===> NETSTAT OPTION(*CNN) ===> NETSTAT OPTION(*CNN6)
-
Manually package your files for IBM , including files containing the output from the commands listed in Step 1 and 2.
Step 3: Send Data to IBM
A good description of the problem and the data is the most important information you can provide to IBM. Please do not send data without providing a description!
- See Exchanging information with IBM Software Support for FTP and email instructions.
- Go to the IBM My Support site to open or update a case.
Note: Always update your case to indicate that data was sent
- If you need to speak with IBM Software Support, contact your country representative. If you need to speak with IBM Software Support in the US, you can call 1-800-IBM-SERV.
Product Synonym
IBMMQ WebSphere MQ WMQ
Was this topic helpful?
Document Information
Modified date:
06 February 2021
UID
swg21293654