Migration considerations for MFT

If you are planning to migrate Managed File Transfer, review this information.

[Long Term Support]

Configuration layout directly after installation in MFT

[MQ 9.2.1 Dec 2020]Note: For Continuous Delivery, the fteMigrateAgent, fteMigrateConfigurationOptions, and fteMigrateLogger commands are removed at IBM® MQ 9.2.1.

[Long Term Support]These commands are still available for IBM MQ 9.2 Long Term Support.

The diagram shows the configuration layout directly after installation as it is in IBM MQ.
Diagram showing the structure of the directories and files for Managed File Transfer directories and files for configuration in IBM MQ
Default configuration directories:
Information is split over four separate sub-directories: config, installations, ipc, and logs.
Default product root directories (MQ_DATA_PATH) are as follows:
  • [AIX][Linux]AIX® and Linux® systems: /var/mqm
  • [Windows]Windows: the location of the configuration directory depends on the location of your primary IBM MQ installation. The default locations for primary installations are as follows:
    • 32-bit: C:\Program Files (x86)\IBM\WebSphere MQ
    • 64-bit: C:\Program Files\IBM\MQ
Configuration sub-directories are as follows:
  • The MQ_DATA_PATH/mqft/config directory contains the parts of the configuration that are read-only for Managed File Transfer processes. For example, agent.properties and command.properties.
  • The MQ_DATA_PATH/mqft/installations directory contains configuration information for each installation. The content of this directory is equivalent to the content of the wmqfte.properties file.
  • [AIX][Linux]The MQ_DATA_PATH/mqft/ipc directory contains IPC resources used internally to communicate between the Managed File Transfer components. Applicable to AIX and Linux systems only.
  • The MQ_DATA_PATH/mqft/logs directory contains the parts of the configuration that are written by Managed File Transfer processes. For example, trace information and log files.
installation.properties file
[AIX][Linux]On AIX and Linux systems, the default location is MQ_DATA_PATH/mqft/installations/installation_name
[Windows]On Windows, the default location is MQ_DATA_PATH\mqft\installations\installation_name
logger.properties file
This file incorporates property information for stand-alone file loggers, stand-alone database loggers, and Java EE database loggers.
The default location is MQ_DATA_PATH/mqft/config/coordination_qmgr_name/loggers/logger_name.

Security changes in IBM MQ 8.0

If you are running Managed File Transfer on IBM WebSphere® MQ 7.0, and migrate to IBM MQ 8.0, the user ID information in the MQMFTCredentials.xml file is passed to the queue manager, but will not be acted upon. This is because the passing of user ID and password information only is supported in IBM MQ 8.0.

commandPath and agent sandboxes

For IBM MQ 8.0 and later, if an agent has been configured with an agent sandbox and the agent property commandPath has been set, then the directories specified by commandPath are automatically added to the denied paths when the agent starts. If the commandPath property is set on an agent which is not configured with an agent sandbox, then a new sandbox is set up automatically and the directories specified by the commandPath are added to the denied directories when the agent starts.

If the commandPath property is set on an agent which is not configured with an agent sandbox, then a new sandbox is set up automatically and the directories specified by the commandPath are added to the denied directories when the agent starts.

commandPath and user sandboxes

For IBM MQ 8.0 and later, if an agent has been configured with one or more user sandboxes, and has the agent property commandPath set, then the directories specified by commandPath (and all of their subdirectories) are automatically added as <exclude> elements to the <read> and <write> elements for each user sandbox when the agent starts up.

For more information about the commandPath property, see commandPath MFT property and The MFT agent.properties file.

[Windows]

Migrating MFT agents that run as a Windows service from IBM WebSphere MQ 7.5 to IBM MQ 9.0

Between IBM WebSphere MQ 7.5, IBM MQ 8.0, and IBM MQ 9.0, the default IBM MQ installation path has changed on the Windows platform.

If a queue manager is being migrated from IBM WebSphere MQ 7.5 to IBM MQ 8.0 or IBM MQ 9.0, any applications that are running on the same system as the queue manager must be reconfigured to load the IBM MQ libraries from the new installation location. This includes any IBM MQ Managed File Transfer agents that are running as a Windows service.

Carry out the following procedure:
  1. Stop the agents that are associated with the IBM WebSphere MQ 7.5 queue manager. See stopping an MFT agent for more information. For example issue the following command:
    fteStopAgent  <agent_name>
  2. Modify the agent to remove the service definition of the agent. See run an MFT agent as a Windows service for more information.
    For example, issue the following command:
    fteModifyAgent -agentName <agent_name>
  3. Next, migrate the agent queue manager from IBM WebSphere MQ 7.5 to the later version by using the setmqm command. See associating a queue manager with an installation for more information about the setmqm command.
  4. Finally, modify the agent to reconfigure the agent to run as a Windows service again, by using the fteModifyAgent command.
    For example:
    fteModifyAgent -agentName AGENT1 -s -su fteuser -sp ftepassword