Collect IBM MQ MustGather data to security problems on z/OS

Resolving The Problem

Please answer these questions about the problem and then follow the steps below:

• What sort of security problem did you observe on the system?
• What time and date did the security problem start ?
• Are only queue managers (queues) involved, or also channels, etc. ?

Step 1: Generate Data

If the security problem is reproducible or is happening right now, generate data to provide more information about the problem:

1. Generate a trace of the queue manager while the security problem is happening.
   
   
   • MSTR Internal trace
   • GTF Trace

   • CHIN trace



2. The following diagnostics may also be required :
   
   
   • RACF trace
   • MQ subsystem joblogs
   • Queue manager/CHIN SVC dump
   • ABEND dump
   • Other dump information

   • Output from DISPLAY SECURITY ALL
   • Results of SETROPTS LIST and RACLIST commands

Step 2: Prepare Data to Send

1. Preparatory steps apply to dumps, traces and joblogs.



2. Use TRSMAIN/AMATERSE utility before uploading to ECUREP and ensure PMR#, B/O#, Country# is specified.



Joblogs may be emailed if not too large.




3. FTP must be done in BINARY mode only.
   
   

   Use Email to provide summary information

   
   
   1. Email address : websphere_support@ecurep.ibm.com
      
      
      
      Subject line must include PMR#, B/O#, Country#
      
      
      
         
      
   
   
   
   2. See message CSQY000I for z/OS MQ level and for distributed MQ see here.
   
   
   
   3. Record the operating system version and maintenance level on any subsystems involved.
   
   
   
   4. Note the resources, profiles, classes and which subsystem security settings are active.
   
   
   
   
   
   

Step 3: Send Data to IBM

1. Send your data to the IBM ECuRep repository After confirmation, emails may be sent to websphere_support@ecurep.ibm.com.



2. While the data is transferring, send an email or use the IBM Service Request tool to update your PMR with your description of the problem and of the data you are sending.




A good description of the problem and the data is the most important information you can provide to IBM. Please do not send data without providing a description!



3. Contact your country representative if you need to speak to an IBM technical support representative, or in the US call 1-800-IBM-SERV. Refer to the IBM Software Support Handbook for more information on working with IBM.




Back to top