runmqckm and runmqakm commands on AIX, Linux, and Windows

This section describes the runmqckm and runmqakm commands according to the object of the command.

The main differences between the two commands are as follows:

runmqckm
- Provides functions that are similar to those of iKeycmd
- Supports the JKS and JCEKS key repository file formats
runmqakm
- Provides functions that are similar to those of gskitcapicmd
- Supports the creation of certificates and certificate requests with Elliptic Curve public keys whereas the runmqckm command does not
- Supports stronger encryption of the key repository file than the runmqckm command through the -strong parameter
- Has been certified as FIPS 140-2 compliant, and can be configured to operate in a FIPS compliant manner, using the -fips parameter

Attention: The runmqckm command requires installation of the IBM® MQ Java runtime environment (JRE) feature.

Each command specifies at least one object. Commands for PKCS #11 device operations might specify additional objects. Commands for key database, certificate, and certificate request objects also specify an action. The object can be one of the following:

-keydb: Actions apply to a key database
-cert: Actions apply to a certificate
-certreq: Actions apply to a certificate request
-help: Displays help
-version: Displays version information

The following subtopics describe the actions that you can take on key database, certificate, and certificate request objects; See runmqckm and runmqakm options on AIX, Linux, and Windows for a description of the options for these commands.