Robotic Process Automation (RPA)

 View Only

 Issue with IBM MQ authorization during IBM RPA installation

Maurizio Caronni's profile image
Maurizio Caronni posted Wed December 17, 2025 06:18 AM

Hi everybody, working with IBM RPA and MQ Series we have incurred in this issue (see below). Anyone could help us?

thanks

Regards

Maurizio

**************************

The issue is related to IBM MQ. We had to choose IBM MQ over Microsoft Message Queuing (MSMQ) because the agents need to be installed on different VLANs (according to the documentation, MSMQ limits server and client to the same VLAN). 

During the IBM RPA installation, we are asked for the credentials and connection details for IBM MQ:

Hostname: B80-C-PMAG01

Port: 1414

Queue Manager: RPASYSTEM

Channel: RPA

User: Magadmin (local admin) Password: *** 

However, after entering this information, we receive the following error: MQRC_NOT_AUTHORIZED and the installation does not allow us to proceed.

Tests performed on IBM MQ:

 Running the command runmqsc RPASYSTEM from CMD (starting mqsc RPASYSTEM with the current user, i.e., Magadmin), the manager starts successfully:

 Starting MQSC for queue manager RPASYSTEM

Running the command runmqsc -u 'Magadmin' RPASYSTEM from CMD (starting mqsc RPASYSTEM with the user Magadmin explicitly specified), we receive an error:

 AMQ8135E: Not authorized.

 

Additional Environment Details: 

The IBM MQ service is set to "Log on as System Account".

The user "Magadmin" is a member of the Windows mqm group.

 The user "Magadmin" is a local administrator.

 This is the same account used to install IBM MQ and is currently being used to run the IBM RPA 30.0.0 FP2 installer.

Tarcio Alonso Mota's profile image
Tarcio Alonso Mota

Did you follow the procedures here?

As I understand it, you are unable to connect to MQ even when using MQ itself, correct?
If so, probably there is something wrong with the MQ service configuration.

Try to redo the documentation steps, it might help.

Maurizio Caronni's profile image
Maurizio Caronni

Thanks, Tarcio.
I reinstalled IBM MQ twice following that guide. On our machine, step 4 fails:

Executing 

runmqsc -u 'Magadmin' RPASYSTEM

the command fails!

(The quotes are necessary because the IBM RPA command cannot interpret lowercase usernames.)

 

Executing: 

runmqsc RPASYSTEM

Using the current user, the same Magadmin, the command starts the queue manager.


But the IBM RPA installation doesn't allow the command to be used without an explicit user name; that's the problem!

Andre Reis's profile image
Andre Reis

Hi Maurizio.

I have a test environment with both Windows and Linux with IBM MQ version V9.4.2.0, 

IBM MQ login

IBM MQ Windows Login

The command is correct, following the documentation. In my case, the user is mqm, and the MQ manager is QMA.

My thoughts about your issue that you can try:

Remove both '' I'm not sure if it's acceptable in the login.

Do not use a root permission or an Administrator account to login, for instance, in this example [Magadmin@B80-C-PMAG01 ~]$ Execute strmqm RPASYSTEM and then runmqsc -u Magadmin RPASYSTEM

In a Windows environment, as an IBM MQ Server, create a service account to use IBM MQ and assign the user to the mqm Group. 

Use a strong password with more 15 characters.

It is all I can think about that could impact the login.

Note: If none of those things work, please share with us, step by step, how you are doing the setup.

Best regards.

André Reis.

Alexsandro Jose Pereira's profile image
Alexsandro Jose Pereira

Hello @Maurizio Caronni not sure if you still facing the issue with it, but in my On Prem Platform I'm using IBM MQ, and when I also migrated from MSMQ to IBM MQ I had such issues, and we added few stuff to make it work, and one of them was adjust Local Policy on windows. So you can go to the secpol.msc (Win+R) and open it, then Security Settings > Local Policies > User Rights Assignment and once it is there, Find the policy Log on as a Service, and add the user to it.

In my case I do not need to be logged on the system with the ID, I can even be logged on the windows with different user, and the user that I'll use to authenticate to IBM MQ, do not even need to be member of Administrator local group. I only have it under mqm group. And set on that policy I said above.
And as Tarcio said, after done these settings, I've followed the guide Tarcio informed before.

FYI this security policy thing is here - https://www.ibm.com/docs/en/ibm-mq/9.4.x?topic=mq-configuring-prepare-wizard#taskq008800___q008800_a1
On step 6