IBM Support

IT17036: MQ APPLIANCE RECREATECERTREQUEST COMMAND REPORTS AMQ9848 EVEN IFTHE CERTIFICATE EXISTS IN THE KEYSTORE

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • IN MQappliance 8005, recreatecertrequest hits AMQ9848:
    For
    --
    # recreatecertrequest -m QMGR
    5724-H72 (C) Copyright IBM Corp. 1994, 2015.
    AMQ9848: No certificate present with label
    ibmwebspheremqqmgr for
    queue
    manager QMGR.
    --
    However, the certificate with the above label does exist in
    the qmgr.
    

Local fix

  • The problem can be circumvented by following these steps:
    1). Export the queue manager key repository to another machine
    that
    has access to GSKit by using the keybackup command.
    2). Work directly with the certificates and certificate requests
    within
    the key repository to carry out the desired operation.
    3). Apply changes back to the appliance using the keyrestore
    command.
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    This issue affects users of the MQ Appliance who manage
    certificates in order to configure Transport Layer Security
    (TLS).
    
    
    Platforms affected:
    MultiPlatform
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    The problem was caused by a programming error which caused the
    recreatecertrequest command to check for the wrong type of
    object in the queue manager's certificate store.
    

Problem conclusion

  • The recreatecertrequest command on the IBM MQ Appliance has been
    updated to fix this error.
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Version    Maintenance Level
    v8.0       8.0.0.6
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT17036

  • Reported component name

    IBM MQ APPL M20

  • Reported component ID

    5725S1400

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-09-13

  • Closed date

    2016-11-02

  • Last modified date

    2017-03-10

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    IBM MQ APPL M20

  • Fixed component ID

    5725S1400

Applicable component levels

  • R800 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS5K6E","label":"IBM MQ Appliance"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
10 March 2017