What certificate name is used for the IBM MQ.Net client installed on the application server?

Question

I am using the IBM MQ WebSphere v 7.5 client installed on the application server.

To securely connect to the MQ queue manager, I need to pass a certificate whose name should be ibmwebspheremq + "userid" . I put my code in APP SERVER to check the MQ connection. If I provide a domain user ID, it works fine for me, but not for other domain users. So, what name of the certificate should be used to work for all users of the domain?

Certificate Sign: ibmwebspeheremq.kdb located on the local path

certificate Name: using strmqikm.exe, open the certificate above and check the name At the moment, this CN is "ibmwebspheremq" + 111111 (domain userid) and it works fine for the user of the domain 111111, but for the user of the domain 222222 it causes SSL errors.

PS Security must be maintained

Update from OP comments September 11, 2015.
I am using a .NET application and executing code using the IBM.WMQ interface provided with the dll amqmdnet. I have KDB certificates, and I just provided the local certificate path in the configuration. I can access the MQ server for a specific user on the APP server (where the MQ client is located), but if I want to access all users, how can I do this? because in my case the certificate label name (using strmqikm.exe) should look like ibmwebspheremq + userid. For individual users, I can access the certificate by logging in to the application server individually, but not for all users at a time. There is only one certificate, and as mentioned earlier, this is a non-JAVA application.

Answer 1

, , !!!

1) , MQ . 2) , , ( ?:)) .

:
3) MQ WCF IIS
4) IIS , i.e. ibmwebspheremq +
5) , , , IIS volla!!!!!! . 6) , role/domain

7) : IBM .

Answer 2

MQ IBM C Java JRE JSSE. .

Java EE JSSE JKS. . , IBM C- API, KDB. , , IBM Technote SSL MQ.

Technote, Java Java . -Java-. JKS, , Java, KDB. JKS KDB, , C KDB.

, JKS, . , , . , MQ , , . Java. , - , , JKS, .

. JKS .

, , , . , , QMgr KDB, .

, , , , , , , , node, SSLCAUTH .. , .

Answer 3

MQ v7.5 # MQ C . ibmwebspheremq<userid> KDB. , @Dirty Developer , , KDB , .

From MQ v8, there is no need to have a certificate label, always having a suffix with a user ID. MQ v8 provides a CertificateLabel property in which applications can specify any certificate label. The MQ client will use the certificate label to find the personal certificate that is sent when the SSL connection is established. In the MQ v8.NET client, this property is called MQEnvironment.CertificateLabel. Here is more on the certificate label in MQ v8.