Working with SSL/TLS on AIX, Linux, and Windows

On AIX®, Linux®, and Windows systems, Transport Layer Security (TLS) support is installed with IBM® MQ.

Note: From IBM MQ 9.4.0, the use of CMS key repositories and stash files with IBM MQ Java applications is deprecated. Migrate to using PKCS #12 key repositories and protect the key repository passwords by using the IBM MQ password protection system.

Important: From IBM MQ 9.4.0, CMS key repositories and stash files are not supported with AMQP and MQTT channels that use SSL/TLS. Use PKCS #12 key repositories and protect the key repository passwords by using the IBM MQ password protection system instead.

For more detailed information about certificate validation policies, see Certificate validation and trust policy design.

For more information about the commands that are used to manage key repositories and certificates on AIX, Linux, and Windows, see runmqakm and runmqktool commands on AIX, Linux, and Windows.