| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Renewing Queue Manager SSL Certificate |
« View previous topic :: View next topic » |
| Author |
Message
|
| hilltops |
 Posted: Tue Jul 22, 2008 4:55 am Post subject: Renewing Queue Manager SSL Certificate |
 |
|
Centurion
Joined: 01 Mar 2006
Posts: 112
|
Does anyone have a procedure for renewing a queue manager's SSL certificate. Unfortunately, this is not addressed in the MQ Security Manual.
Any pointers will be most appreciated.
Thanks |
|
| Back to top |
|
 |
| JosephGramig |
| Posted: Sat Jul 26, 2008 11:01 am Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
Well, it depends.
If you used a public CA or you built 'One local self signed CA to rule them all', then you can:
- Add the new CA, which will need a unique label and DN to avoid replacing the current CA, to all Keystores used clients/servers that will interact with one another
- Each QMGR and client (one at a time) needs to request a certificate with the correct label (that will replace the current certificate)
- Have the CA sign the certificate request
- Each QMGR/Client should receive (only their) signed certificate
- If it was a QMGR, REFRESH SECURITY TYPE(SSL)
If you followed the WMQ InfoCenters advise and all QMGRs and Clients exchanged their keys, then "May God have mercy on you"!
Well, now that I read what I wrote, it will work in that case too (but is a change in your strategy). Using a Public CA or 'One local self signed CA' will result in the Keystore only needing to contain two certs. The CA's cert and the clients/QMGRs signed cert.
Only delete certs no longer in use, so you might want to wait until your all done with your updates to delete old stuff (make backups).
_________________
Joseph
Administrator - IBM WebSphere MQ (WMQ) V6.0, IBM WebSphere Message Broker (WMB) V6.1 & V6.0
Solution Designer - WMQ V6.0
Solution Developer - WMB V6.1 & V6.0, WMQ V5.3 |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
