[Windows]

Installing IBM MQ on a server or workstation in a Windows domain

In this task, you install and configure IBM® MQ on a server or workstation in the wmq.example.com Windows domain.

In a production scale configuration, you might have to tailor the configuration to an existing domain. For example, you might define different domain groups to authorize different shares, and to group the user IDs that run queue managers.

The example configuration consists of three servers:
sun
A Windows Server 2008 domain controller. It owns the wmq.example.com domain that contains Sun, mars, and venus. For the purposes of illustration, it is also used as the file server.
mars
A Windows Server 2008 used as the first IBM MQ server. It contains one instance of the multi-instance queue manager called QMGR.
venus
A Windows Server 2008 used as the second IBM MQ server. It contains the second instance of the multi-instance queue manager called QMGR.

Replace the italicized names in the example, with names of your choosing.

Before you begin

Important: By default, computers beginning with Windows 10 version 1607 and Windows Server 2016 are more restrictive than earlier versions of Windows.

This change restricts clients allowed to make remote calls to the Security Accounts Manager (SAM) and could impact IBM MQ with queue managers failing to start. Access to SAM is critical for the functioning of IBM MQ when IBM MQ is configured as a domain account.

  1. Do the steps in Creating an Active Directory and DNS domain on Windows to create a domain controller, sun, for the domain wmq.example.com. Change the italicized names to suit your configuration.

  2. See Hardware and software requirements on Windows systems for other Windows versions you can run IBM MQ on.

About this task

In this task you configure a Windows Server 2008, called mars, as a member of the wmq.example.com domain. You install IBM MQ, and configure the installation to run as a member of the wmq.example.com domain.

This task is one of a set of related tasks that illustrate accessing queue manager data and log files. The tasks show how to create a queue manager authorized to read and write data and log files that are stored in a directory of your choosing. They accompany the task, Windows domains and multi-instance queue managers.

For the purposes of the task the domain controller host name is sun, and the two IBM MQ servers are called mars and venus. The domain is called wmq.example.com. You can replace all the italicized names in the task with names of your own choosing.

Procedure

  1. Add the domain controller, sun.wmq.example.com to mars as a DNS server.
    1. On mars, log on as mars\Administrator and click Start.
    2. Right-click Network > Properties > Manage network connections.
    3. Right-click the network adapter, click Properties.

      The system responds with the Local Area Connection Properties window listing items the connection uses.

    4. Select the Internet Protocol Version 4 or Internet Protocol IBM WebSphere® MQ 6 from the list of items in the Local Area Connection Properties window. Click Properties > Advanced... and click the DNS tab.
    5. Under the DNS server addresses, click Add....
    6. Type the IP address of the domain controller, which is also the DNS server, and click Add.
    7. Click Append these DNS suffixes > Add....
    8. Type wmq.example.com and click Add.
    9. Type wmq.example.com in the DNS suffix for this connection field.
    10. Select Register this connection's address in DNS and Use this connection's suffix in DNS registration. Click OK > OK > Close
    11. Open a command window, and type the command ipconfig /all to review the TCP/IP settings.
  2. On mars, add the computer to the wmq.example.com domain.
    1. Click Start
    2. Right-click Computer > Properties. In the Computer name, domain and workgroup settings division, click Change settings.
    3. In the System Properties windows, click Change....
    4. Click Domain, type wmq.example.com, and click OK.
    5. Type the User name and Password of the domain controller administrator, who has the authority to permit the computer to join the domain, and click OK.
    6. Click OK > OK > Close > Restart Now in response to the Welcome to the wmq.example.com domain message.
  3. Check that the computer is a member of the wmq.example.com domain
    1. On sun, log on to the domain controller as wmq\Administrator.
    2. Open Server Manager > Active Directory Domain Services > wmq.example.com > Computers and check mars is listed correctly in the Computers window.
  4. Install IBM MQ for Windows on mars.

    For further information about running the IBM MQ for Windows installation wizard; see Installing IBM MQ server on Windows .

    1. On mars, log on as the local administrator, mars\Administrator.
    2. Run the Setup command on the IBM MQ for Windows installation media.

      The IBM MQ Launchpad application starts.

    3. Click Software Requirements to check that the prerequisite software is installed.
    4. Click Network Configuration > Yes to configure a domain user ID.

      The task, Creating an Active Directory and DNS domain on Windows, configures a domain user ID for this set of tasks.

    5. Click IBM MQ Installation, select an installation language and click Launch IBM MQ Installer.
    6. Confirm the license agreement and click Next > Next > Install to accept the default configuration. Wait for the installation to complete, and click Finish.

      You might want to change the name of the installation, install different components, configure a different directory for queue manager data and logs, or install into a different directory. If so, click Custom rather than Typical.

      IBM MQ is installed, and the installer starts the Prepare IBM MQ Wizard.
      Important: Do not run the wizard yet.
  5. Configure the user that is going to run the IBM MQ service with the Run as a service right.

    Choose whether to configure the local mqm group, the Domain mqm group, or the user that is going to run the IBM MQ service with the right. In the example, you give the user the right.

    1. Click Start > Run..., type the command secpol.msc and click OK.
    2. Open Security Settings > Local Policies > User Rights Assignments. In the list of policies, right-click Log on as a service > Properties .
    3. Click Add User or Group... and type wmquser1 and click Check Names
    4. Type the user name and password of a domain administrator, wmq\Administrator, and click OK > Apply > OK. Close the Local Security Policy window.
  6. Run the Prepare IBM MQ Wizard.

    For further information, see Configuring IBM MQ with the Prepare IBM MQ Wizard.

    1. The IBM MQ Installer runs the Prepare IBM MQ Wizard automatically.

      To start the wizard manually, find the shortcut to the Prepare IBM MQ Wizard in the Start > All programs > IBM MQ folder. Select the shortcut that corresponds to the installation of IBM MQ in a multi-installation configuration.

    2. Click Next and leave Yes clicked in response to the question Identify if there is a Windows 2000 or later domain controller in the network.
    3. Click Yes > Next in the first Configuring IBM MQ for Windows for Windows domain users window.
    4. In the second Configuring IBM MQ for Windows for Windows domain users window, type wmq in the Domain field. Type wmquser1 in the User name field, and the password, if you set one, in the Password field. Click Next.

      The wizard configures and starts the IBM MQ with wmquser1.

    5. In the final page of the wizard, select or clear the check boxes as you require and click Finish.

What to do next

  1. Do the task, Reading and writing data and log files authorized by the local mqm group, to verify that the installation and configuration are working correctly.
  2. Do the task, Creating a shared directory for queue manager data and log files on Windows, to configure a file share to store the data and log files of a multi-instance queue manager.