Did you know that you can now rename a certificate label simply and easily using GSKit version 8, included with WebSphere MQ versions 7.1 and 7.5?
You may find you want to reuse a digital certificate that already exists in a CMS keystore, but the label of the certificate contains the name of another WebSphere MQ queue manager or client user.
How do you change it?
WebSphere MQ version 7.1 includes the GSKit version 8 which now allows you to rename certificate labels using either the GUI, or either of the command line interfaces.
To use the GUI, open your keystore and select your personal certificate. Click the "Rename" button, and enter the new certificate label.
To use the command line, the command below can be used with either runmqckm or runmqakm. Remember to use runmqakm if you need to manage your certificate in a FIPS compliant manner:
runmqakm -cert -rename -db key.kdb -label ibmwebspheremqorigqmname -new_label ibmwebspheremqnewqmname
Any changes to the contents of your keystore will require a refresh of the queue manager's security cache. Remember to issue the refresh security mqsc command before attempting to use the updated keystore:
"REFRESH SECURITY TYPE(SSL)"