Configuring a Secure Connection for the IBM MQ Web Console on Linux and Windows Platforms

Summary

1. Install The MQ Console
2. Replace the existing configuration file, mqwebuser.xml with the basic registry sample file that is configured to offer basic security.
3. Start the mqweb server that supports MQ Console.
4. Confirm the MQ Console web server has started on port 9443.
5. When you start the mqweb server a self-signed personal certificate in a key repository will be generated at the following locations.
6. Extract the signer certificate from the self-signed personal certificate, to a file using the following commands.
7. Add the signer certificate default.cer to your browser of choice (Chrome Browser Example).
8. From step 4 use the https address to access MQ Console from your browser.
9. Login to the MQ Console using the default administrator's userId/password.
10. Configure the MQ Web Server to accept remote connections.
11. Browser Requirements to allow the MQ Console to connect remote to the MQ Web Server.
12. Creating a new self-signed certificate using a full hostname or IP Address.
13. Extracting the root signer certificate from the newly generated self-signed certificate.
14. Restart your MQ Web Server so that the new certificate is used in the connection.
15. Make sure the values set in your CN or SAN certificate distinguished name properties (full hostname or ip address) is used to configure your MQ Web Console https connection.