Commands for a CMS key database only

We can use the runmqckm, and runmqakm commands to manage keys and certificates for a CMS key database.

-keydb -changepw

Change the password for a CMS key database:

-keydb -changepw -db filename -pw password -new_pw new_password



-stash

-keydb -create

Create a CMS key database:

-keydb -create -db filename
-pw password -type cms -expire days -stash

-keydb -stashpw

Stash the password of a CMS key database into a file:

-keydb -stashpw -db filename
-pw password

-cert -getdefault

Note: The default certificate is not supported by IBM MQ Version 8.0. You should use certificate label configuration as described in Digital certificate labels, understanding the requirements. Get the default personal certificate:

-cert -getdefault -db filename
-pw password

-cert -modify

Modify a certificate. Note: Currently, the only field that can be modified is the Certificate Trust field.

-cert -modify -db filename
-pw password -label label
-trust enable|disable

-cert -setdefault

Note: The default certificate is not supported by IBM MQ Version 8.0 or later. You should use certificate label configuration as described in Digital certificate labels, understanding the requirements. Set the default personal certificate:

-cert -setdefault -db filename
-pw password -label label