[AIX, Linux, Windows]

Managing keys and certificates on AIX, Linux, and Windows

On AIX®, Linux®, and Windows, use the runmqckm and runmqakm commands to manage keys, certificates, and certificate requests.

The runmqckm command provides functions that are similar to those of iKeyman, and the runmqakm command provides functions that are similar to those of gskitcapicmd. Before using runmqckm or runmqakm, ensure that the systems environment variables are correctly configured by running the setmqenv command.

The runmqckm command requires the IBM® MQ JRE component to be installed. If this component is not installed you can use the runmqakm command instead.

If you need to manage TLS certificates in a way that is FIPS compliant, use the runmqakm command instead of the runmqckm command. This is because the runmqakm command supports stronger encryption.

Use the runmqckm and runmqakm commands to do the following:
  • Create the type of CMS key database files that IBM MQ requires
  • Create certificate requests
  • Import personal certificates
  • Import CA certificates
  • Manage self-signed certificates