If WebSphere MQ version 6.0 has already been installed

 

This section deals with the issue of having upgraded to WebSphere MQ V6.0 without having complete certificate chains.

If you have installed WebSphere MQ V6.0 without completing Step 1: Ensuring WebSphere MQ certificate stores contain complete certificate chains, you will not be able to use AMQMCERT to add any missing certification authority certificates.

You should still use AMQTCERT (Transfer Certificates) command as detailed in Step 2: Migrating SSL certificates to Global Security Toolkit key database files, to attempt certificate migration. Any certificates that have an incomplete certificate chain will fail the migration, and will be copied into a special directory.

If this occurs you will need to:

1. Individually import each certification authority certificate in the failed certificates issuer chain in the correct order

2. Import the failed certificate from the special directory

For more details of these steps, see Reasons and remedies for failed certificate migration.

 

Parent topic:

Step 1: Ensuring WebSphere MQ certificate stores contain complete certificate chains

mi10330_