IBM has published a technical note on how to perform common IBM MQ management certificate tasks.
https://www.ibm.com/support/pages/node/6382940
This document is intended to help with IBM MQ certificate management. It lists some of the most common commands needed to do basic certificate management tasks.
In IBM MQ you can performed such tasks through the IBM Key Management GUI (iKeyman) or through the command line using runmqckm and runmqakm commands.
This document provides examples for certificate management using the command line. There is a corresponding link to the IBM MQ documentation to perform the same task using iKeyman.
- List of topics:
- How to check a certificate expiration
- How to list the content of a MQ keystore
- How to view the content of a certificate
- How to (process) create a certificate signing request (CSR) and to receive a CA signed personal certificate
- How to renew an existing certificate before it expires
- How to rename a certificate
- How to export and import a personal certificate
- How to check/verify that you have a personal certificate for your queue manager or client
- How to tell if the certificate has OCSP/CRL validation
- How to combine public certifcate and private key into PKCS12 file
Regards,
Roger Lacroix
Capitalware Inc.
