Reference Manual

10.5
- 10.5.6
- 10.5.5
- 10.5.4
- 10.5.3
- 10.5.2
- 10.5.1
- 10.4.1
- 10.4.0 HotFix 1
- 10.4.0

Back Next

Creating a Personal Certificate on z/OS

To create a personal or subject identification certificate use RACF or another facility such as ACF2 or TopSecret.

The following steps assume you are using RACF and that the RACF administrator has already created a suitable CA (site) certificate.

Create a key ring.

Create a personal certificate.

Connect the personal certificate to the key ring.

Connect the CA certificate to the key ring.

The following example illustrates these steps:

/* Create a Keyring for the application                   */
RACDCERT ID(MYUSERID) ADDRING(ATTLS_keyring)
SETROPTS RACLIST(DIGTCERT,DIGTNMAP) REFRESH 

/* Create a certificate for the Server application        */ 
RACDCERT ID(MYUSERID) GENCERT -                     
  SUBJECTSDN ( -                               
    O('MyCompany') -                         
    CN('MYUSERID.mymachine.myorganization.com') -       
    OU('myorganizationunit') -                          
    C('GB') -                                  
            )          -                       
   WITHLABEL('MYUSERIDCert1')-                       
   SIGNWITH(CERTAUTH LABEL('LOCALCA'))          
 SETROPTS RACLIST(DIGTCERT,DIGTNMAP) REFRESH  
  
/* Connect the server certificate to the server’s keyring.*/ 
RACDCERT ID(MYUSERID) CONNECT(ID(MYUSERID) -  LABEL('MYUSERIDCert1') –
RING(ATTLS_keyring) –
DEFAULT –
USAGE(personal))                            
SETROPTS RACLIST(DIGTCERT,DIGTNMAP) REFRESH
    
/* Connect the CA certificate to the server's keyring     */ 
RACDCERT ID(MYUSERID) CONNECT(CERTAUTH –
LABEL('LOCALCA') –
RING(ATTLS_keyring) -  USAGE(certauth))      
SETROPTS RACLIST(DIGTCERT,DIGTNMAP) REFRESH

Rename Saved Search

Table of Contents

Reference Manual

Reference Manual

Creating a Personal Certificate on z/OS

Creating a Personal Certificate on z/OS