Error IRRD126I adding CA certificate for CA SMP/E Internet Service Retrieval
search cancel

Error IRRD126I adding CA certificate for CA SMP/E Internet Service Retrieval

book

Article ID: 135233

calendar_today

Updated On:

Products

COMMON SERVICES FOR Z/OS Common Services

Issue/Introduction

Using CA SMP/E Internet Service Retrieval and adding the SMP/E RECEIVE ORDER CA Certificate to RACF on z/OS.


RACDCERT CERTAUTH ADD('hlq.BROADCOM.RECEIVE.ORDER.CRT') WITHLABEL('DigiCert SHA2 Secure Server CA')   TRUST                


Error message:

IRRD126I The certificate contains either a key usage or basic constraint extension indicating that it may not be used as a Certificate



Environment

Release : All

Component : CCS390 - CA COMMON SERVICES FOR Z/OS

Resolution

The certificate has to be uploaded to the mainframe as ASCII with the WRAP option to a fie with LRECL=256 and RECFM=VB. 

If the wrap option is not used the certificate will be truncated and the IRRD126I error will be issued.

Use the following FTP commands to avoid truncation:


ASCII
QUOTE SITE WRAP LRECL=256 RECFM=VB
PUT cert_file_name 'your.mvs.dataset.name' (REPLACE
quit



Additional Information

See documentation section Obtain the Certificates for CA SMP/E Internet Service Retrieval and Configure IBM RACF Security