Change the key repository location for a queue manager on IBM i
Change the location of our queue manager's certificate store using either CHGMQM or ALTER QMGR.
Procedure
Use either the CHGMQM command or the ALTER QMGR MQSC command to set your queue manager's key repository attribute.
- Using CHGMQM: CHGMQM MQMNAME('qm1') SSLKEYR('/QIBM/UserData/ICSS/Cert/Server/MyKey')
- Using ALTER QMGR: ALTER QMGR SSLKEYR('/QIBM/UserData/ICSS/Cert/Server/MyKey')
In either case, the certificate store has the fully qualified file name: /QIBM/UserData/ICSS/Cert/Server/MyKey.kdb
What to do next
When we change the location of a queue manager's certificate store, certificates are not transferred from the old location. If the CA certificates preinstalled when you create the certificate store are insufficient, we must populate the new certificate store with certificates, as described in Importing a certificate into a key repository on IBM i. We must also stash the password for the new location, as described in Stashing the certificate store password on IBM i systems. Parent topic: Work with SSL/TLS on IBM i