Manage TLS certificates

To manage the TLS certificates on your local computer using a GUI, use IBM Key Management (iKeyman).

The information in this task applies to managing TLS certificates on a local computer.

Note that we cannot manage TLS certificates on remote computers using the iKeyman GUI.

Manage TLS certificates in the iKeyman GUI

To work with a personal certificate in the iKeyman GUI, we must complete the following steps.

Create a key database file in the location that is specified in the queue manager's Key repository attribute.
Request and obtain from a Certificate Authority (CA) a personal certificate with the correct label and its full chain of CA certificates back to the Root certificate.
Add all the certificates, in the correct order, to the key repository of the queue manager using the iKeyman GUI.

For instructions on how to use the iKeyman GUI, and for more information about security, see Securing.

Parent topic: Securing channels with TLS