USAGE for Root Certificates on Keyring

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

When adding a root certificate to the keyring, what should USAGE be set to?

Environment

Release:
Component: TSSMVS

Resolution

Root certificate should have a USAGE of CERTAUTH. USAGE(PERSONAL) are for client certificates and not root certificates.

Example:

TSS ADD(acid) KEYRING(keyringname) RINGDATA(CERTAUTH,rootcert) USAGE(CERTAUTH)