Specify the location of the key repository files
The location of the key repository files will need to be specified on the Remote Queue Manager Connections screen. Perform the following:
- From the workgroup server, select Create > Remote Queue Managers.
- Select the connection manager from the left side of the screen and click Modify.
- On the SSL tab within the Key repository field enter the path of the key files. Being that there are several key.* files (key.kdb, key.rdb, key.sth), do not include the file extension. Only specify the name that the key files start with. In the example below, the files all start with the name key.
Create certificates
When creating certificates for the key repository files for the server and client, the certificates will need to be the same, but the labels will differ.
For the Server: The queue manager key repository certificate will need to be named, ibmwebspheremq{$qmgrname}. The name is case sensitive and must be all lowercase. In the example below, the key file's certificate label would be ibmwebspheremqqm_rhel5 for queue manager QM_RHEL5.
For the Client: On the client side used by nsqcm, the same certificates will need to have the following label in all lowercase: ibmwebspheremq{$username}. The username specified is the username that the program is running under. In the example below, nsqcm runs under the user mqm, so the client label would be named ibmwebspheremqmqm.
