[UNIX, Linux, Windows]

Specifying the key repository location for an IBM MQ MQI client on UNIX, Linux, and Windows

There is no default key repository for an IBM® MQ MQI client. You can specify its location in either of two ways. Ensure that the key database file can be accessed only by intended users or administrators to prevent unauthorized copying to other systems.

You can specify the location of the key database file for your IBM MQ MQI client in two ways:
  • Setting the MQSSLKEYR environment variable. For example, on UNIX and Linux®: 
    
export MQSSLKEYR=/var/mqm/ssl/key
    The key database file has the fully-qualified file name: 
    
/var/mqm/ssl/key.kdb
    On Windows: 
    
set MQSSLKEYR=C:\Program Files\IBM\MQ\ssl\key
    The key database file has the fully-qualified file name: 
    
C:\Program Files\IBM\MQ\ssl\key.kdb
    Note: The .kdb extension is a mandatory part of the file name, but is not included as part of the value of the environment variable.
  • Providing the path and stem name of the key database file in the KeyRepository field of the MQSCO structure when an application makes an MQCONNX call. For more information about using the MQSCO structure in MQCONNX, see Overview for MQSCO.