| Author | Message | 
		
		  | WBI_user | 
			  
				|  Posted: Wed Oct 29, 2008 4:45 am    Post subject: Keyetore password prompt at explorer start up |   |  | 
		
		  | Partisan
 
 
 Joined: 07 Aug 2001Posts: 386
 
 
 | 
			  
				| I am using WMQ V6 on Windows XP. I need to implement SSL security for MQ explorer. I have the keystore and certificate set up done. I also updated the explore "window/preference/WMQ Explorer/SSL certificate store" with the stor location and the password. Everything is working until I exit the explorer. When I restart the explorer, it is prompting me for keysotre and trust store password. There must be something wrong. I expect the explorer to have saved the password I entered and never have to prompt again. Any help ? |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | David.Partridge | 
			  
				|  Posted: Wed Oct 29, 2008 5:02 am    Post subject: |   |  | 
		
		  |  Master
 
 
 Joined: 28 Jun 2001Posts: 249
 
 
 | 
			  
				| That seems to be the way it works - always prompts for passwords.   I'm not aware of a way to make it remember them across sessions. _________________
 Cheers,
 David C. Partridge
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | gs | 
			  
				|  Posted: Wed Oct 29, 2008 5:33 am    Post subject: |   |  | 
		
		  |  Master
 
 
 Joined: 31 May 2007Posts: 254
 Location: Sweden
 
 | 
			  
				| The "Enter Password" feature only seems to be applicable when: You pointed out the keystore(s) and want to connect using SSL without restarting MQ Explorer.
 
 However, you must not try using the keystore(s) before entering the password or you must restart the app to make it use your password.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | WBI_user | 
			  
				|  Posted: Wed Oct 29, 2008 6:20 am    Post subject: |   |  | 
		
		  | Partisan
 
 
 Joined: 07 Aug 2001Posts: 386
 
 
 | 
			  
				| 
   
	| Quote: |  
	| That seems to be the way it works - always prompts for passwords. I'm not aware of a way to make it remember them across sessions. |  
 From the security point of view, I don't want to give the keystore password to the users
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | David.Partridge | 
			  
				|  Posted: Thu Oct 30, 2008 12:08 am    Post subject: |   |  | 
		
		  |  Master
 
 
 Joined: 28 Jun 2001Posts: 249
 
 
 | 
			  
				| Why not?   It is after all their own personal key store with only their personal private key and related certificate in need of protection.   All the other certificates in there will be either CA certs for validating QM certs, or QM certs (if self signed). _________________
 Cheers,
 David C. Partridge
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | PhilBlake | 
			  
				|  Posted: Thu Oct 30, 2008 1:54 am    Post subject: |   |  | 
		
		  |  Acolyte
 
 
 Joined: 25 Oct 2005Posts: 64
 
 
 | 
			  
				| 
   
	| WBI_user wrote: |  
	| 
   
	| Quote: |  
	| That seems to be the way it works - always prompts for passwords. I'm not aware of a way to make it remember them across sessions. |  
 From the security point of view, I don't want to give the keystore password to the users
 |  
 For what it's worth, you can do this in MQ Explorer v7.
   
 Phil
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | JLRowe | 
			  
				|  Posted: Thu Oct 30, 2008 1:55 am    Post subject: |   |  | 
		
		  |  Yatiri
 
 
 Joined: 25 May 2002Posts: 664
 Location: South East London
 
 | 
			  
				| Have you saved the stash file for the keystore? (this is an option in ikeyman) |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  |  |