I have retried the MQ remote agent connection with the SSL options selected I have copied across the Introscope cert store that we use to connect to the QMGR locally and specified them in the bundle.properties file. I see the following error in the MQ log when I try and connect via SSL:
09/07/21 15:11:32 - Process(12374.17478) User(mqm) Program(amqrmppa)
Host(xxxxxxxxx) Installation(Installation1)
VRMF(9.1.0.7) QMgr(QM1)
Time(2021-07-09T14:11:32.711Z)
RemoteHost(nnn.nnn.nnn.nnn)
CommentInsert1(INTROSCOPE.SVR)
CommentInsert2(SSLCAUTH)
CommentInsert3('xxxxxxxxx (nnn.nnn.nnn.nnn))
AMQ9637E: During handshake, the remote partner sent no certificate.
EXPLANATION:
The conversation cannot begin because a certificate has not been supplied by
the remote partner.
The channel name is 'INTROSCOPE.SVR'.
The remote host is 'xxxxxxxxx (nnn.nnn.nnn.nnn)'.
If this error message is written on the receiving side of the channel, then the
channel attributes 'SSLCAUTH' caused the check to be made.
ACTION:
Look at the key repository on the remote side of this channel, and make sure
the appropriate certificates are present, with correct labels.
Release : 20.2
Component : APM Agents
Problem was due to missing certificate on the agent side. The customer uses both the MQ and IIB monitor extensions and had only copied across the keystore from the IIB side - once the MQ keystore had also been copied across and made available in the keystore configured in the bundle .properties the connection worked