[UNIX, Linux, Windows]

Managing keys and certificates on UNIX, Linux, and Windows

Use the runmqckm command (UNIX and Windows), and runmqakm command (UNIX, Linux®, and Windows) to manage keys, certificates, and certificate requests.

The runmqckm command
The runmqckm command is available on UNIX and Windows.

The runmqckm command provides functions that are similar to those of iKeyman, described in Securing IBM MQ.

To use the runmqckm command, ensure that the systems environment variables are correctly configured by running the setmqenv command.

[V9.1.0 Jul 2018]The runmqckm command requires the IBM MQ JRE component to be installed. If this component is not installed you can use the runmqackm command instead.

The runmqakm command
The runmqakm command is available on UNIX, Linux, and Windows.

To use the runmqaqm command, ensure that the systems environment variables are correctly configured by running the setmqenv command.

If you need to manage TLS certificates in a way that is FIPS compliant, use the runmqakm command instead of the runmqckm commands. This is because the runmqakm command supports stronger encryption.

Use the runmqckm and runmqakm commands to do the following:
  • Create the type of CMS key database files that IBM MQ requires
  • Create certificate requests
  • Import personal certificates
  • Import CA certificates
  • Manage self-signed certificates