Applying the Public Key to the Queue Manager
Each private key assigned to Integration Server will have a corresponding public key. Assign the corresponding public key to the Queue Manager. If the public key is not supplied by the CA, you can generate one from a private key using any Certificate Management Tool.
OR
From a java keystore, the public key can be generated using a java keytool (-export option).
To apply the public key to the Queue Manager
1. Depending on the WebSphere MQ version, do the following:
In WebSphere MQ 5.3, select
Manage SSL Certificates options in the WebSphere MQ Explorer. Use the
Add option.
In WebSphere MQ 6.0 and 7.x:
1. Use the IBM Key Management Utility to import the public key of the Queue Manager into the IBM keystore file.
2. Specify the name of the keystore file against the Queue Manager. To do so, select the Queue Manager > SSL > Key Repository property in the WebSphere MQ Explorer.