Validating a certificate

You can validate a certificate in the key repository of a queue manager by using the validatecert command on the command line.

About this task

You can use the validatecert command to validate a certificate and its trust chain in a queue manager key repository. Validation ensures that the following criteria are met:

  • All necessary intermediate and root certificates that are used to validate the certificate are present.
  • These certificates have not expired.

Procedure

  1. Enter the IBM® MQ administration mode by entering the following command:

    mqcli

  2. Rename the certificate by entering the following command:

    validatecert -m QMgrName [-label Label]

    Where:
    QMgrName
    Specifies the name of the queue manager that you want to delete the certificate from.
    Label
    Optionally specifies the current label that is associated with the certificate. If not specified, the default label value, ibmwebspheremqqm_name_lower_case, is used.
  3. Optional: Exit the IBM MQ administration mode by entering the following command:

    exit