Migrating with AltGSKit from Version 7.0.1 to Version 7.1

Perform this task only if we are migrating from IBM WebSphere MQ Version 7.0.1 using the AltGSKit configuration setting to load an alternative GSKit. The alternative GSKit used by IBM WebSphere MQ Version 7.0.1 with the AltGSKit setting is separate from the GSKit used by IBM WebSphere MQ Version 7.1; changes to each GSKit do not affect the other. This is because Version 7.1 uses a private local copy of GSKit in its installation directory and does not support the use of an alternative GSKit.


Overview of the main migration steps for AltGSKit

When migrating from IBM WebSphere MQ Version 7.0.1 using AltGSKit to IBM WebSphere MQ Version 7.1, there are a number of tasks to be performed to enable the new GSKit to operate successfully. The main steps to consider when migrating:

  1. Ensure that no applications require the use of the currently installed alternative GSKit before initiating removal.
  2. Remove the AltGSKit setting from the SSL stanza of each queue manager and client configuration file.
  3. Restart each MQI client application which is using the alternative GSKit to ensure that no client applications have the alternative GSKit loaded.
  4. Issue the REFRESH SECURITY TYPE(SSL) on each queue manager which is using the alternative GSKit to ensure that no queue managers have the alternative GSKit loaded.
  5. Uninstall the alternative GSKit as per the platform specific instructions outlined in this topic.
  6. Install the alternative GSKit as per the platform specific instructions referred to in this topic.


Removing the AltGSKit setting

Before the alternative GSKit can be uninstalled, the AltGSKit setting must be removed from the SSL stanza of each queue manager and client configuration file.

To view the contents and for further information about the queue manager configuration files, see Queue manager configuration files, qm.ini

For information about the the SSL stanza of the client configuration file, see SSL stanza of the client configuration file.

Once the configuration file has been altered:
  1. Restart each MQI client application which is using the alternative GSKit to ensure that no client applications have the alternative GSKit loaded.
  2. Issue the REFRESH SECURITY TYPE(SSL) on each queue manager which is using the alternative GSKit to ensure that no queue managers have the alternative GSKit loaded.


Uninstalling GSKit

For platform specific instructions for uninstalling the alternative GSKit, see the following sections:


Uninstalling GSKit Version 8.0 on Windows

We can uninstall GSKit Version 8.0 interactively using Add or Remove Programs in the Windows Control Panel. You can uninstall GSKit Version 8.0 silently using the Windows Installer msiexec utility or the GSKit installation file. To use an accessible interface to uninstall GSKit Version 8.0, use either of the silent uninstallation methods.

  • To uninstall GSKit Version 8.0 by using msiexec:
    1. Issue the command 
      msiexec /x PackageName
      PackageName is one of the values GSKit8 SSL 32-bit, GSKit8 Crypt 32-bit, GSKit8 SSL 64-bit, or GSKit8 Crypt 64-bit.
    2. Repeat for each package to be uninstalled.


Uninstalling GSKit Version 8.0 on Linux

We can uninstall GSKit Version 8.0 using the rpm command.

Uninstall GSKit Version 8.0 by using the following command: 
rpm -ev gskssl32-8.0.X.Y gskcrypt32-8.0.X.Y
X.Y represents the version number of GSKit installed.

On 64-bit Linux platforms run the following additional command: 

rpm -ev gskssl64-8.0.X.Y gskcrypt64-8.0.X.Y


Uninstalling GSKit Version 8.0 on AIX

We can uninstall GSKit Version 8.0 using the installp command.

Uninstall GSKit Version 8.0 by using the following command: 
installp -u -g -V2 gskcrypt32.ppc.rte gskssl32.ppc.rte gskcrypt64.ppc.rte gskssl64.ppc.rte


Installing GSKit on IBM WebSphere MQ Version 7.1

On IBM WebSphere MQ Version 7.1 for Windows, GSKit is automatically installed.

To install GSKit on IBM WebSphere MQ Version 7.1 on Linux and UNIX, refer to instructions outlined in the following topics:

Parent topic: Security reference