IBM Charlotte MQ User Group

 IBM Carolinas MQ User Group

A vibrant local community for developers, architects, integration specialists, and IT professionals passionate about IBM MQ Advanced including Native HA & CRR. Based in Charlotte, NC, our group brings together beginners and seasoned experts alike to share knowledge, exchange real-world experiences, explore best practices, and stay ahead of the latest IBM innovations. 

 View Only
Back to discussions
Expand all | Collapse all

The Certificate Rotation Challenge: Zero-Downtime vs. Manual Toil

  • 1.  The Certificate Rotation Challenge: Zero-Downtime vs. Manual Toil

    Posted 05/05/26 05:59 PM
    Edited by Purush Das 05/05/26 06:00 PM

    Hi everyone!

    As certificate validity periods continue to shrink (approaching the "90-day" or even "47-day" standards), the traditional "manual renewal" once a year is no longer sustainable. I wanted to open a discussion on how everyone is handling IBM MQ Certificate Rotation in 2026.

    Are you using the "Label Swap" method (keeping two certs in the KDB and flipping the CERTLABLattribute) or the "Over-write" method (replacing the file and refreshing)? Is anyone successfully automated the end-to-end renewal? Or are we still relying on calendar alerts and manual KDB updates?

    I'd love to hear from you:  What was your last "Certificate Expired" horror story?

    Thanks,

    Purush



    ------------------------------
    Purush Das
    Founder/Principal Consultant
    Integrationpath LLC
    Charlotte
    6142186410
    ------------------------------



Related Content