Task 2: APF authorize the IBM MQ load libraries
APF-authorize various libraries. Some load modules might already be authorized.
- You need to perform this task once for each z/OS® system where you want to run IBM® MQ.
- If you are using queue-sharing groups, you must ensure that the settings for IBM MQ are identical on each z/OS system in the sysplex.
- You might need to perform this task when migrating from a previous version.
The IBM MQ load libraries thlqual.SCSQAUTH and thlqual.SCSQLINK must be APF-authorized. You must also APF-authorize the libraries for your national language feature (thlqual.SCSQANLx and thlqual.SCSQSNLx) and for the distributed queuing feature (thlqual.SCSQMVR1). If you are using IBM MQ Advanced Message Security you must also APF authorize the library thlqual.SDRQAUTH.
LNKAUTH=LNKLST
LNKAUTH=LNKLST is the default if LNKAUTH is not specified.
Depending on what you choose to put in the LPA or linklist (see Task 3: Update the z/OS link list and LPA ), you might not need to put the libraries in the APF link list
The APF lists are in the SYS1.PARMLIB member PROGxx or IEAAPFaa. The lists contain the names of APF authorized z/OS libraries. The order of the entries in the lists is not significant. See the MVS Initialization and Tuning Reference manual for information about APF lists.
For more information about tuning your system, see SupportPac MP16
If you use PROGxx members with dynamic format, you need only issue the z/OS command SETPROG APF,ADD,DSNAME=hlq.SCSQ XXXX,VOLUME= YYYYYY
for the changes to take effect: Where XXXX varies by the library name and where YYYYY is the volume. Otherwise, if you use static format or IEAAPFaa members, you must perform an IPL on your system.
Note that you must use the actual name of the library in the APF list. If you attempt to use the data set alias of the library, authorization fails.