Task 2: APF authorize the IBM MQ load libraries

APF-authorize various libraries. Some load modules might already be authorized.

  • You need to perform this task once for each z/OS® system where you want to run IBM® MQ.
  • If you are using queue-sharing groups, you must ensure that the settings for IBM MQ are identical on each z/OS system in the sysplex.
  • You might need to perform this task when migrating from a previous version.

The IBM MQ load libraries thlqual.SCSQAUTH and thlqual.SCSQLINK must be APF-authorized. You must also APF-authorize the libraries for your national language feature (thlqual.SCSQANLx and thlqual.SCSQSNLx) and for the distributed queuing feature (thlqual.SCSQMVR1). If you are using IBM MQ Advanced Message Security you must also APF authorize the library thlqual.SDRQAUTH.

However, all load modules in the LPA are automatically APF-authorized. So are all members of the link list if the SYS1.PARMLIB member IEASYSpp contains the statement:

LNKAUTH=LNKLST

LNKAUTH=LNKLST is the default if LNKAUTH is not specified.

Depending on what you choose to put in the LPA or linklist (see Task 3: Update the z/OS link list and LPA ), you might not need to put the libraries in the APF link list

Note: You must APF-authorize all the libraries that you include in the IBM MQ STEPLIB. If you put a library that is not APF-authorized in the STEPLIB, the whole library concatenation loses its APF authorization.

The APF lists are in the SYS1.PARMLIB member PROGxx or IEAAPFaa. The lists contain the names of APF authorized z/OS libraries. The order of the entries in the lists is not significant. See the MVS Initialization and Tuning Reference manual for information about APF lists.

For more information about tuning your system, see SupportPac MP16

If you use PROGxx members with dynamic format, you need only issue the z/OS command SETPROG APF,ADD,DSNAME=hlq.SCSQ XXXX,VOLUME= YYYYYY for the changes to take effect: Where XXXX varies by the library name and where YYYYY is the volume. Otherwise, if you use static format or IEAAPFaa members, you must perform an IPL on your system.

Note that you must use the actual name of the library in the APF list. If you attempt to use the data set alias of the library, authorization fails.