IT24267: MQ runmqakm utility receives error CTGSK2098W attempting to create a certificate without a common name (CN).

APAR status

• Closed as duplicate of another APAR.

Error description

• It is possible to use the IKeyman GUI and the runmqckm utility
  to create a certificate without a
  Common Name (CN) attribute in the Distinguished Name (DN).
  
  This is valid as described in the product documentation.
  .
  https://www.ibm.com/support/knowledgecenter/SSFKSJ_9.0.0/com.ibm
  .mq.mig.doc/q001220_.htm
  .
  However when attempting the same operation with runmqakm the
  GSKit utility ended with the following error:
  .
  "CTGSK2098W The required common name field is empty. CTGSK3024W
  Invalid value for parameter "-dn" (C=US,O=ABC,OU=Test)."
  

Local fix

• Use the IKeyman GUI or runmqckm utilities to create certificates
  without a CN.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  This affects users of MQ creating certificates with runmqakm who
  wish to omit the CN attribute
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  The GSKit software bundled with MQ contained a defect which
  caused this problem.
  

Problem conclusion

• The GSKit defect has been fixed in GSKit version 8.0.50.89.
  
  APAR IT25049 updates the level of GSKit supplied with MQ v8 to
  this level.
  
  APAR IT25459 updates the level of GSKit supplied with MQ v9.0
  LTS to this level.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v8.0       8.0.0.10
  v9.0 LTS   9.0.0.5
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

• This APAR is a duplicate of IT25049
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels