Changing the key repository location for a queue manager

 

We can change the location of your queue manager's certificate store using any of the following methods:

• Use either the CHGMQM command or the ALTER QMGR MQSC command to set your queue manager's key repository attribute, for example:

  CHGMQM MQMNAME('qm1') SSLKEYR('/QIBM/UserData/ICSS/Cert/Server/MyKey')
  
  ALTER QMGR SSLKEYR('/QIBM/UserData/ICSS/Cert/Server/MyKey')

  The certificate store has the fully-qualified filename: /QIBM/UserData/ICSS/Cert/Server/MyKey.kdb

When you change the location of a queue manager's certificate store, certificates are not transferred from the old location. If the CA certificates pre-installed when you created the certificate store are insufficient, populate the new certificate store with certificates, as described in Managing digital certificates. You must also stash the password for the new location, as described in Stashing the certificate store password.

 

Parent topic:

Working with a key repository

sy12000_