AMQ9657E: The key repository could not be opened

Process(7278.5) User(colinpaice) Program(amqrmppa)
                Host(colinpaice) Installation(Installation1)
                VRMF(9.2.1.0) QMgr(QMA)
                Time(2021-02-06T11:57:02.761Z)
                RemoteHost(127.0.0.1)
                ArithInsert1(202)
                CommentInsert1(????)
               CommentInsert2(gsk_environment_init)

The return code (202) came from gsk_environment_init function.

I used z/OS to look into the gskit .h files to find the return codes.

  • GSK_KEYRING_OPEN_ERROR 202
  • GSK_ERR_BAD_KEYFILE_PASSWORD 408

EXPLANATION:

The key repository could not be opened. The key repository either does not exist or has incorrect permissions associated with it. The channel is ‘????’;  in some cases its name cannot be determined and so is shown as ‘????’. The channel did not start.

ACTION:

Ensure that the key repository you specify exists and that its permissions are such that the MQ process involved can read from it. Restart the channel.

Colin’s actions

Use the MQSC command DIS QMGR ALL to display value of the SSLKEYR.

  • Check the case of the keyring
  • Check the name… without the .kdb on the end

Display the QMGR and CHANNEL CERTLABL – make sure the case is correct.