Step 2: Migrating SSL certificates into Global Security Toolkit database files

 

This section deals with migrating SSL certificates into Global Security Toolkit key database files and must be performed after installing WebSphere MQ V6.0.

The Global Security Toolkit (GSKit) requires SSL certificates to be stored in key database files that it creates and manages. This can be achieved by migrating the SSL certificates held in certificate stores used by WebSphere MQ V5.3 queue managers and WebSphere MQ clients into key database files.

This section details how to do this using the Prepare WebSphere MQ Wizard, and the AMQTCERT (Transfer Certificates) command.

Perform Step 1: Ensuring WebSphere MQ certificate stores contain complete certificate chains, prior to installing WebSphere MQ V6.0.

The following sections describe the process for migrating your SSL certificates to the GSKit database files:

• Using the Prepare WebSphere MQ Wizard to schedule certificate migration

• Using the AMQTCERT (Transfer Certificates) command

We cannot schedule certificate migration using the Prepare WebSphere MQ Wizard unless you have run the Check WebSphere MQ Certificate Stores Wizard. AMQTCERT can be run without completing Step 1, but you are advised to complete Step 1 prior to moving on to Step 2.

• Using the Prepare WebSphere MQ Wizard to schedule certificate migration
  This section describes the use of the Prepare WebSphere MQ Wizard which can schedule the migration of your certificate stores and also prompts you to alter other system features for WebSphere MQ V6.0 SSL.

• Using the AMQTCERT (Transfer Certificates) command
  This section describes the use of the AMQTCERT (Transfer Certificates) command, which can be used to create key database files and transfer existing SSL certificates held in certificate stores used by queue managers and WebSphere MQ clients.

 

Parent topic:

SSL migration steps

mi10340_