| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Generate Certificate request on Windows |
« View previous topic :: View next topic » |
| Author |
Message
|
| jonny |
 Posted: Thu Feb 03, 2005 9:14 am Post subject: Generate Certificate request on Windows |
 |
|
Acolyte
Joined: 03 Jul 2003
Posts: 57
|
Hi,
How can I generate certificate request on Windows, so that it can be signed by an in-house CA created on Solaris using ikeyman.
thanks in advance |
|
| Back to top |
|
 |
| tjfunny1 |
| Posted: Tue Mar 22, 2005 2:08 pm Post subject: You won't like this, but............. |
|
|
Apprentice
Joined: 17 Jun 2002
Posts: 35
Location: Atlanta
|
You have 2 choices: (unless you have Websphere App Server on the windows box, then use that)
1) obtain openssl and go through the manual to create a CSR. You will need to follow the steps in #2 below, but from the windows side.
2) if you have access to a unix box with MQ installed, you can generate a CSR with the gsk6ikm interface. The label must be 'ibmwebspheremq<qmgr>', all in lowercase (<qmgr> = your queue manager name on the windows box). Send the CSR to the CA, and import the certificate they return to you into the unix keystore. I usually create a keystore for windows boxes on the unix server, that isn't tied to any queue manager. After that certificate is imported/received to unix, you must export the key into a p12 file for windows (protected by a password, but binary), and select 'exportable private key'. FTP the p12 file (along with the CA's certificates unless they are already on windows), over to the windows server. Install the CA certificates (if needed), and then the p12 file (w/password). Bring up the "Manager SSL Certificates" from MQ Services, and select the label 'ibmwebspheremqqmgr' from the list, and assign it to the qmgr.
I was told by a IBM SSL guru that the CSR could be done from a OS390 keystore also, as long as you exported the private key in p12 format.
Hope this helps. 
_________________
TJ
IBM Certified System Administrator Websphere MQ v5.3 |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
