Specifying the key repository location for an IBM MQ MQI client on AIX, Linux, and Windows

There is no default key repository for an IBM® MQ MQI client. The location of the client key repository can be specified in the IBM MQ MQI client configuration, or by the application when it connects to the queue manager. Ensure that only intended users or administrators can access the key database file to prevent unauthorized copying to other systems.

The location of the key repository for an IBM MQ MQI client is specified by using one of the following methods:

The KeyRepository field of the MQSCO structure that the application specifies it calls MQCONNX. For more information, see MQSCO - SSL/TLS configuration options.
The MQSSLKEYR environment variable. For more information, see MQSSLKEYR.
The SSLKeyRepository attribute in the SSL stanza of the client configuration file. For more information, see SSLKeyRepository.

Using one of these methods, specify the full path and the file name of the IBM MQ MQI client key repository.

If the file suffix is not specified:

IBM MQ first checks for a file with extension .p12 before checking for a file with extension .kdb.
The file suffix is assumed to be .kdb.