To Install a Signed Certificate

1. Check whether J2SE supports your certification authority by default.

   The following command lists the root CAs in the system key store:

      keytool  -v  -list  -keystore $JAVA_HOME/lib/security/cacerts
   

   If your CA is listed, skip the next step.

2. If your certification authority is not supported in J2SE, import the CA’s root certificate into the Message Queue key store.

   Here is an example:

      keytool  -import  -alias ca  -file ca.cer  -noprompt  -trustcacerts
               -keystore /etc/imq/keystore  -storepass myStorePassword
   

   where ca.cer is the file containing the root certificate obtained from the CA.

   If you are using a CA test certificate, you probably need to import the test CA root certificate. Your CA should have instructions on how to obtain a copy.

3. Import the signed certificate into the key store to replace the original self-signed certificate.

   Here is an example:

      keytool  -import  -alias imq  -file broker.cer  -noprompt  -trustcacerts
               -keystore /etc/imq/keystore  -storepass myStorePassword
   

   where broker.cer is the file containing the signed certificate that you received from the CA.

   The Message Queue key store now contains a signed certificate to use for SSL connections.