Cannot REMOVE Certificate Which Has Been GENREQed In Top Secret

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

When issuing:

TSS REM(Myacid) DIGICERT(Mydcert) 

the following Top Secret error message occurred:

TSS1628E Cannot REMOVE - Certificate has been GENREQed

How this certificate be removed from Top Secret?

Environment

z/OS

Resolution

Use the FORCE option to remove a GENREQed certificate.

TSS REM(Myacid) DIGICERT(Mydcert) FORCE

Be careful before removing a certificate with FORCE.
- If the certificate has not been added back once it has been signed by a CA, the private key will be lost.
- If the signed certificate has been added back to its original acid then private key has been reconnected, then FORCE can be used to remove the GENREQed certificate.

If the certificate is not signed and is not being used, then FORCE can be used.