Specifying the key repository location for an IBM MQ MQI client on AIX, Linux, and Windows
There is no default key repository for an IBM® MQ MQI client. You can specify its location in either of two ways. Ensure that the key database file can be accessed only by intended users or administrators to prevent unauthorized copying to other systems.
You can specify the location of the key database file for your IBM MQ MQI client in two ways:
- Setting the MQSSLKEYR environment variable. For example, on AIX® and Linux®:
The key database file has the fully-qualified file name:export MQSSLKEYR=/var/mqm/ssl/key
/var/mqm/ssl/key.kdb
On Windows:
The key database file has the fully-qualified file name:set MQSSLKEYR=C:\Program Files\IBM\MQ\ssl\key
C:\Program Files\IBM\MQ\ssl\key.kdb
Note: The.kdb
extension is a mandatory part of the file name, but is not included as part of the value of the environment variable. - Providing the path and stem name of the key database file in the KeyRepository field of the MQSCO structure when an application makes an MQCONNX call. For more information about using the MQSCO structure in MQCONNX, see Overview for MQSCO.