mqiptKeytool (manage certificates)

Purpose

Use the mqiptKeytool command to manage the trusted certificates in keystores that MQIPT uses.

From IBM MQ 9.4.0, this command replaces the mqiptKeycmd command that is used to manage certificates in earlier versions of MQIPT.

Usage notes

The mqiptKeytool command calls the keytool certificate management utility in the Java runtime environment that is supplied with MQIPT.

Keywords and parameters

-certreq

Create a request for a signed certificate to be sent to a certificate authority (CA). You must first create a key pair by using the -genkeypair command.

-changealias

Change the label that is associated with an entry in the keystore.

-delete

Delete an entry from the keystore.

-exportcert

Extract the public part of a certificate from the keystore.

-genkeypair

Create a public key and private key pair, and an associated self-signed certificate.

-importcert

Add a certificate to the keystore. Use this command to complete one of the following actions:

• Add a certificate to the keystore as a trusted certificate.
• Receive a certificate that is signed by a certificate authority (CA) into the keystore.

-importkeystore

Import certificates and their associated private keys into the keystore from another keystore.

-keypasswd

Change the password that protects a private key in the keystore.

-list

List the contents of the keystore.

-storepasswd

Change the keystore password.

options

The parameters that are required for the specified command.

All commands and options that are specified are passed unchanged to the keytool certificate management utility in the Java runtime environment that is supplied with MQIPT.

Return codes