Using IBM MQ trusted applications

Configure an integration node to run as an IBM® MQ trusted application.

Before you begin

You must complete the following tasks:

Ensure that your user ID is a member of the mqm group. On UNIX and Linux®, specify the user ID mqm as the service user ID when you create the integration node. On Windows, use any service user ID that is a member of mqm. Refer to Security requirements for administrative tasks.
Review the restrictions that IBM MQ places on trusted applications that apply to your environment. See Connecting to a queue manager using the MQCONNX call in the IBM MQ product documentation online.

About this task

You can configure an integration node to run as a trusted (fastpath) application on all supported platforms . If the integration node is configured as a trusted application, it runs in the same process as the IBM MQ queue manager agent, and all integration node processes benefit from an improvement in the overall system performance.

An integration node does not run as a trusted application by default; therefore, you must create a trusted application by using the mqsicreatebroker command.

Configuring an integration node as a trusted application does not affect the operation of IBM MQ channel agents or listeners. For more information about running these as trusted applications, see Running channels and listeners as trusted applications in theIBM MQ product documentation online.

Take care when deploying user-defined message flow nodes or parsers. Because a trusted application (the integration node) runs in the same operating system process as the queue manager, a user-defined message flow node or parser might compromise the integrity of the queue manager. Consider fully the restrictions that apply to your environment and test user-defined nodes and parsers in a non-trusted environment before deploying them in a trusted integration node.

You can configure an integration node to run as a trusted application when you create it.

Procedure

To create an integration node on a command line, run the mqsicreatebroker command with the -t flag, which specifies that the integration node is created as a trusted application.

For example, enter the following command to create an integration node called INODE as a trusted application:

mqsicreatebroker INODE -q ACEQMGR -i mqm -t

See Creating an integration node for more detailed information about how to create an integration node for your platform.