What is the cause of ACF67030 INVALID OPERAND - SUBJECTSDN on a GENCERT?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

I am converting RACF commands to ACF2 commands and I am getting error message ACF67030 INVALID OPERAND - SUBJECTSDN on a GENCERT. I entered the GENCERT as follows:

ACF 
GENCERT CERTAUTH.WEBCERT SUBJECTSDN(CN='cn' OU='ou') 
LABEL(label) TRUST EXPIRE(2015/12/31)

Environment

Release:
Component: ACF2MS

Resolution

The keyword SUBJECTSDN is accepted by RACF, but not by ACF2. The correct keyword for ACF2 is SUBJSDN.

 

ACF
GENCERT CERTAUTH.WEBCERT SUBJSDN(CN='cn' OU='ou')
LABEL(label) TRUST EXPIRE(2015/12/31)