validatecert (validate certificate)

Validate a certificate and its trust chain in the keystore of a specific queue manager, or for replication links.

Purpose

You can use the validatecert command to validate a certificate and its trust chain in a key repository. Validation ensures that the following criteria are met:

All necessary intermediate and root certificates that are used to validate the certificate are present.
These certificates have not expired.

Syntax

Parameters

-m QMgrName: Specifies the name of the queue manager for which the certificate is validated.; The queue manager must exist.
-replication: Specifies that the certificate to validate is for the replication link of an HA, DR, or DR/HA queue managers. The same certificate is used for all HA, DR, or DR/HA queue managers on an appliance.
-label Label: Optionally specifies the label of the certificate to validate.; If not specified, the default label value is used. For queue managers, the default value is ibmwebspheremqQMgrName, where QMgrName is the name of the queue manager in lowercase. For replication links, the default value is mq_replication.

Usage notes

This command must be run from the IBM® MQ administration mode. If the system is in the IBM MQ administration mode the prompt includes mq. To enter the IBM MQ administration mode, enter mqcli on the command line. To exit the IBM MQ administration mode, enter exit on the command line.

Examples

The following command validates a certificate with a label of cert1 for the queue manager QM1:
```
validatecert -m QM1 -label cert1 
```