The IBM MQ queue manager's key repository is used to store the queue manager's personal certificate and the public Certificate Authority (CA) certificate. The personal certificate request from the IBM MQ queue manager must be signed by a CA, the public certificate is used by the other entities to authenticate the IBM MQ queue manager. Before you begin You must have the public Certificate Authority certificate in a file. About this task Create the IBM MQ queue manager's key repository, import the certificate authority's signer certificate and create the queue manager's personal certificate request. Procedure Create a CMS key repository file for the queue manager called key.kdb . Navigate to the Qmgrs\QM1\ssl directory, and on the command line, type: runmqckm -keydb -create -db key.kdb -pw passw0rd -type cms -stash Note: For this simple example we have used a password of passw0rd . You may wish to choose a different password and cha