|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
Keyrings in WebSphere MQ for multiple QMGRS per System |
« View previous topic :: View next topic » |
Author |
Message
|
t7516dw |
Posted: Tue Jan 10, 2012 2:40 am Post subject: Keyrings in WebSphere MQ for multiple QMGRS per System |
|
|
Newbie
Joined: 14 Nov 2011 Posts: 6
|
Hi,
In my company we planning to use encryption on MQ communications using SSL certificates. The first step I have to do is to create the keyrings where SSL certificates will be stored, on each server (Windows and Linux systems).
My question is: If I have more than one queue manager in a system, should I create one keyring per queue manager or create a unique keyring for all queue managers? If both options are possible, which is better (advantages/disadvantages)?
Another question I have: Is possible to use a unique SSL certificate for severals queue managers in a system?
Regards,
Adib |
|
Back to top |
|
 |
exerk |
Posted: Tue Jan 10, 2012 3:50 am Post subject: Re: Keyrings in WebSphere MQ for multiple QMGRS per System |
|
|
 Jedi Council
Joined: 02 Nov 2006 Posts: 6339
|
t7516dw wrote: |
My question is: If I have more than one queue manager in a system, should I create one keyring per queue manager... |
Yes
Quote: |
...or create a unique keyring for all queue managers? |
Inadvisable
Quote: |
If both options are possible, which is better (advantages/disadvantages)? |
Better is one key store per queue manager, the reasons for which are obvious, i.e. what happens wen the network share containing the key store files is unavailable? What happens if the key store files become corrupted?
Quote: |
Another question I have: Is possible to use a unique SSL certificate for severals queue managers in a system? |
Look at the label naming requirements for a queue manager, then see if you can answer your own question. _________________ It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|