Specifying the key repository location for a WebSphere MQ client

 

There is no default key repository for a WebSphere MQ client. Ensure that the key database file can be accessed only by intended users or administrators to prevent unauthorized copying to other systems.

We can specify the location of your WebSphere MQ client's key database file by:

• Set the MQSSLKEYR environment variable. For example, on UNIX:

  export MQSSLKEYR=/var/mqm/ssl/key

  The key database file has the fully-qualified filename:

  /var/mqm/ssl/key.kdb

  On Windows:

  set MQSSLKEYR=C:\\IBM\WebSphere MQ\ssl\key

  The key database file has the fully-qualified filename:

  C:\\IBM\WebSphere MQ\ssl\key.kdb

  The .kdb extension is a mandatory part of the filename, but is not included as part of the value of the environment variable.

• Providing the path and stem name of the key database file in the KeyRepository field of the MQSCO structure when an application makes an MQCONNX call. For more information about using the MQSCO structure in MQCONNX, refer to the Application Programming Reference.

 

Parent topic:

Working with a key repository

sy12230_