# Step 4: Ensuring SSLPEER values have correctly ordered Organizational Unit entries

This section describes how to check that the SSLPEER Organizational Unit (OU) values are in the correct order and how to change them if they are not.

Note: If you have already installed Fix Pack level 8 or higher for WebSphere® MQ Version 5.3, you can ignore this step.

SSL-enabled channels that use the optional SSLPEER field to filter Distinguished Names must be checked to ensure multiple Organizational Unit entries (OUs) have been correctly ordered. This section contains information on why this check is needed, and how to do it.

- Why you need to check that SSLPEER values have correctly ordered OU entries
  This section details why you have to change the order of your SSLPEER values if you are migrating from a WebSphere MQ Version 5.3 Fix Pack 7 or earlier installation.
- How to display and change SSLPEER values
  This section details how you can display the SSLPEER values that you have set and gives an example of how to change them.

Parent topic: SSL migration steps