Commands for a CMS key database only

You can use the runmqckm, and runmqakm commands to manage keys and certificates for a CMS key database.

-keydb -changepw

Change the password for a CMS key database:


-keydb -changepw -db filename -pw password -new_pw new_password


-stash

-keydb -create

Create a CMS key database:


-keydb -create -db filename -pw password 
-type cms -expire days -stash

-keydb -stashpw

Stash the password of a CMS key database into a file:


-keydb -stashpw -db filename -pw password

-cert -getdefault

Note: The default certificate is not supported by IBM® MQ 8.0. You should use certificate label configuration as described in Digital certificate labels, understanding the requirements.

Get the default personal certificate:


-cert -getdefault -db filename -pw password

-cert -modify

Modify a certificate.

Note: Currently, the only field that can be modified is the Certificate Trust field.


-cert -modify -db filename -pw password -label label
-trust enable | disable

-cert -setdefault

Note: The default certificate is not supported by IBM MQ 8.0. You should use certificate label configuration as described in Digital certificate labels, understanding the requirements.

Set the default personal certificate:


-cert -setdefault -db filename
-pw password -label label