| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MSCS cluster Windows 2008 |
« View previous topic :: View next topic » |
| Author |
Message
|
| velocity |
 Posted: Mon Apr 22, 2013 7:03 pm Post subject: MSCS cluster Windows 2008 |
 |
|
Centurion
Joined: 30 Nov 2007
Posts: 126
|
Hello,
I have created MQ failover successfully over an MSCS cluster. I have moved the QM to the shared disk and tested out failover.
The issue is, now I plan to do SSLs. How can I accomplish this?
Should I remove the QM from MSCS control and bring it on the local server and install SSLs? And then move it back to the shared disk using MSCS?
Thank you. |
|
| Back to top |
|
 |
| exerk |
| Posted: Tue Apr 23, 2013 12:32 am Post subject: Re: MSCS cluster Windows 2008 |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| velocity wrote: |
| I have created MQ failover successfully over an MSCS cluster. I have moved the QM to the shared disk and tested out failover. |
Well done...
| velocity wrote: |
| The issue is, now I plan to do SSLs. How can I accomplish this? |
As you would for any queue manager...
| velocity wrote: |
| Should I remove the QM from MSCS control and bring it on the local server and install SSLs? And then move it back to the shared disk using MSCS? |
Why? Stop and think about what you have asked and then ask yourself should this step be necessary? Take very careful note of what the Info Centre states in regard to the path to the key store files.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| velocity |
| Posted: Tue Apr 23, 2013 12:10 pm Post subject: |
|
|
Centurion
Joined: 30 Nov 2007
Posts: 126
|
| Quote: |
Why? Stop and think about what you have asked and then ask yourself should this step be necessary? Take very careful note of what the Info Centre states in regard to the path to the key store files.
|
Thanks for your response.
If my local drive is D: and shared drive is E:, If I install SSLs all the SSL certs will reside on D:/apps/mqm/qmgrs/qmname/ssl directory. And I have already moved the data to E: Are you saying I need to run SSL commands on the E: instead of D:? The info center says below:
==============================================
If the queue manager being moved uses SSL connections and the SSL key repository is in the queue manager data directory on the local machine, then the key repository will be moved with the rest of the queue manager to the shared disk. By default, the queue manager attribute that specifies the SSL key repository location, SSLKEYR, is set to MQ_INSTALLATION_PATH\qmgrs\QMGRNAME\ssl\key, which is under the queue manager data directory. MQ_INSTALLATION_PATH represents the high-level directory in which WebSphere MQ is installed. The hamvmqm command does not modify this queue manager attribute. In this situation you must modify the queue manager attribute, SSLKEYR, using the WebSphere MQ Explorer or the MQSC command ALTER QMGR, to point to the new SSL key repository file. |
|
| Back to top |
|
|
| exerk |
| Posted: Tue Apr 23, 2013 1:30 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| velocity wrote: |
| If my local drive is D: and shared drive is E:, If I install SSLs all the SSL certs will reside on D:/apps/mqm/qmgrs/qmname/ssl directory. |
Really? Have you looked to confirm that? Especially as the Info Centre states "...If the queue manager being moved uses SSL connections and the SSL key repository is in the queue manager data directory on the local machine, then the key repository will be moved with the rest of the queue manager to the shared disk..." - the part of the Info Centre that I said you should read carefully you obviously have not, or not understood it.
| velocity wrote: |
| And I have already moved the data to E: Are you saying I need to run SSL commands on the E: instead of D:? |
You don't 'run the SSL commands' against a drive, you run them against key store files.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Wed Apr 24, 2013 8:38 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
iT says specifically that although the physical files have been moved to shared storage, the pointer in the qmgr definition still points to the old local storage for your ssl files and that you need to update the pointer using either MQE or runmqsc...
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
