Convert RACF commands to TSS commands for Simple Logon Digital Certificate Setup
book
Article ID: 114872
calendar_today
Updated On:
Products
Top SecretTop Secret - LDAP
Issue/Introduction
Convert RACF commands to TSS commands for Simple Logon Digital Certificate Setup.
Environment
Release: Component: TSSLDP
Resolution
//********************************************************************************************************************** //The RACF commands necessary to run the SSLOnlyWAR sample contained within the //SimpleLoginEAR. //********************************************************************************************************************** //Permit the Liberty server id MSTONE1 to the FACILITY class IRR.DIGTCERT.LISTRING PERMIT IRR.DIGTCERT.LISTRING CLASS(FACILITY) ID(MSTONE1) ACCESS(READ)
//Create your personal certificate signed by LibertyCA.LIBERTY RACDCERT ID(MSTONE1) GENCERT SUBJECTSDN(CN('boss0181.pok.ibm.com') O('IBM') OU('LIBERTY')) WITHLABEL('DefaultCert.LIBERTY') SIGNWITH(CERTAUTH LABEL('LibertyCA.LIBERTY')) TRUST NOTAFTER(DATE(2030/12/31)
//Connect the signer certificate LibertyCA.LIBERTY to the keyring LibertyKeyring with usage CERTAUTH RACDCERT ID(MSTONE1) CONNECT(CERTAUTH LABEL('LibertyCA.LIBERTY') RING(LibertyKeyring) USAGE(CERTAUTH)
//Connect the personal certificate DefaultCert.LIBERTY to the keyring LibertyKeyring with usage //PERSONAL RACDCERT ID(MSTONE1) CONNECT(ID(MSTONE1) LABEL('DefaultCert.LIBERTY') RING(LibertyKeyring) USAGE(PERSONAL)