Configuring the certificate monitor by using the IBM MQ Appliance web UI

You can use the IBM® MQ Appliance web UI to configure the certificate monitor for the IBM MQ Appliance.

About this task

Configure the certificate monitor to regularly check your certificates and output log messages that warn you if any have expired or are about to expire.

Procedure

  1. Start the IBM MQ Appliance web UI, and click the objects icon shows the object icon.
  2. Select Crypto Configuration > Crypto Certificate Monitor.
  3. Ensure that the Administrative state is On.
  4. In the Polling Interval field, specify how frequently the certificates should be scanned. Specify a value between 1 and 65535 days.
  5. In the Reminder Time field, specify how many days in advance of expiration warnings should be issued. Specify a value between 1 and 65535 days.
  6. In the Log Level field, specify the log level that should be assigned to the certificate expiration warnings.
  7. Select Disable Expired Certificates to automatically disable certificates that have expired. This feature is not available for queue manager certificates.

What to do next

You should define log targets to consume the log messages generated by the certificate monitor, see Appliance log targets. The log messages have the category cert-monitor.