# Adding missing certification authority certificates into WebSphere MQ certificate stores

This section gives the commands necessary to add SSL certificates into WebSphere® MQ certificate stores to complete the certificate chains before migrating to WebSphere MQ Version 7.0.

Missing certificates can be obtained from the certification authority that issues them. To import a certification authority certificate into a WebSphere MQ certificate store, issue the AMQMCERT command at a command prompt.

- For a queue manager enter:

      amqmcert -a -s CertificateFilename -m queueManager

  To list all certificates in the WebSphere MQ queue manager certificate store, enter:

      amqmcert -l -m queueManager

  Where:

  - CertificateFilename is the fully qualified file name of the file where the certification authority certificate is stored in (certification authority certificates are usually provided in files with extensions .DER, .pb7, or .CER)
  - queueManager is the name of the queue manager that requires the certificate to be added to its certificate store
- For a client (which uses the WebSphere MQ client certificate store identified by the MQSSLKEYR environment variable) enter:

      amqmcert -a -s CertificateFilename

  To list all certificates in the WebSphere MQ client certificate store, enter:

      amqmcert -l

  Where:
  - CertificateFilename is the fully qualified file name of the file where the certification authority certificate is stored in (certification authority certificates are usually provided in files with extensions .DER, .pb7, or .CER)
- For client applications that use MQCONNX calls enter:

      amqmcert -a -s CertificateFilename -k KeyRepository

  To list all certificates in the WebSphere MQ client certificate store, enter:

      amqmcert -l -k KeyRepository

  Where:
  - CertificateFilename is the fully qualified file name of the file where the certification authority certificate is stored in (certification authority certificates are usually provided in files with extensions .DER, .pb7, or .CER)
  - KeyRepository is the value (the fully qualified stem name of the repository file) stored in the MQSCO structure

For full details of the AMQMCERT command see the "WebSphere MQ Version 5.3 System Administration Guide".

Parent topic: Step 1: Ensuring WebSphere MQ certificate stores contain complete certificate chains