Each QMGR uses a Key Store and must have the CA's key in it that will sign the QMGR's key. So, it will also store the QMGR's key. It must also contain the CA's key of any partner you wish to connect on a channel that uses SSL. So, if the same CA signs everybody's key, then you only need the CA and QMGR keys.
Search this web site and you will find a lot on this topic.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum