Implementing TLS Security in a PowerExchange Network

Back Next

Step 2B. Create Personal Certificates on z/OS

To create a personal certificate on z/OS, use RACF or another security facility such as ACF2 or TopSecret.

The following steps assume that you are using RACF and the RACF administrator has already created a suitable CA site certificate.

Create a key ring.

Create a personal certificate.

Connect the personal certificate to the key ring.

Connect the CA certificate to the key ring.

The following example RACF commands perform these steps:

/* Create a Keyring for the application                   */
RACDCERT ID(MYUSERID) ADDRING(ATTLS_keyring)
SETROPTS RACLIST(DIGTCERT,DIGTNMAP) REFRESH 

/* Create a certificate for the Server application        */ 
RACDCERT ID(MYUSERID) GENCERT -                     
  SUBJECTSDN ( -                               
    O('MyCompany') -                         
    CN('MYUSERID.mymachine.myorganization.com') -       
    OU('myorganizationunit') -                          
    C('GB') -                                  
            )          -                       
   WITHLABEL('MYUSERIDCert1')-                       
   SIGNWITH(CERTAUTH LABEL('LOCALCA'))          
 SETROPTS RACLIST(DIGTCERT,DIGTNMAP) REFRESH  
  
/* Connect the server certificate to the server’s keyring.*/ 
RACDCERT ID(MYUSERID) CONNECT(ID(MYUSERID) -  LABEL('MYUSERIDCert1') –
RING(ATTLS_keyring) –
DEFAULT –
USAGE(personal))                            
SETROPTS RACLIST(DIGTCERT,DIGTNMAP) REFRESH
    
/* Connect the CA certificate to the server's keyring     */ 
RACDCERT ID(MYUSERID) CONNECT(CERTAUTH –
LABEL('LOCALCA') –
RING(ATTLS_keyring) -  USAGE(certauth))      
SETROPTS RACLIST(DIGTCERT,DIGTNMAP) REFRESH

Rename Saved Search

Table of Contents

Implementing TLS Security in a PowerExchange Network

Implementing TLS Security in a PowerExchange Network

Step 2B. Create Personal Certificates on z/OS

Step 2B. Create Personal Certificates on z/OS