[AIX, Linux, Windows]

Converting a key repository on AIX, Linux, and Windows

Use this procedure to convert a key repository to a different type.

You can convert a key repository password to a different type by using the runmqakm or runmqktool (keytool) commands.

Using runmqakm

Issue the following command to convert a key repository with the runmqakm command:
runmqakm -keydb -convert -db filename -pw password
         -new_db filename -new_pw password
         -old_format type -new_format type
where:
-file filename
Specifies the fully qualified file name of the key repository.
-pw password
Specifies the password for the key repository.
-new_db filename
Specifies the fully qualified file name of the new key repository.
-new_pw password
Specifies the password for the new key repository.
-old_format type
Specifies the current type of the key repository. The following values can be specified:
  • pkcs12
  • cms
-new_format type
Specifies the new type of the key repository. The following values can be specified:
  • pkcs12
  • cms
For more information about these parameters and the values that can be specified, see runmqakm -keydb.
[MQ 9.4.0 Jun 2024][MQ 9.4.0 Jun 2024]

Using runmqktool

Issue the following command to convert a key repository with the runmqktool command:
runmqktool -importkeystore -srckeystore filename -destkeystore filename
           -srcstoretype type -deststoretype type
           -srcstorepass password -deststorepass password
where:
-all
Specifies that the password is also changed for all entries that are protected with the same password as the key repository.
-keystore filename
Specifies the fully qualified file name of the key repository.
-destkeystore filename
Specifies the fully qualified file name of the new key repository.
-srcstoretype type
Specifies the key repository type.
Specifies the type of the destination key repository. The value can be one of the following values:
  • pkcs12
  • jks
  • jceks
-deststoretype type
Specifies the new key repository type. The value can be one of the following values:
  • pkcs12
  • jks
  • jceks
The default key repository type is JKS.
-srcstorepass password
Specifies the password for the key repository.
-deststorepass password
Specifies the password for the new key repository.
For more information about these parameters and the values that can be specified: