Error IRRD126I adding CA certificate for CA SMP/E Internet Service Retrieval

Products

• COMMON SERVICES FOR Z/OS
• Common Services

Issue/Introduction

Using CA SMP/E Internet Service Retrieval and adding the SMP/E RECEIVE ORDER CA Certificate to RACF on z/OS.

RACDCERT CERTAUTH ADD('hlq.BROADCOM.RECEIVE.ORDER.CRT') WITHLABEL('DigiCert SHA2 Secure Server CA')   TRUST                

Error message:

IRRD126I The certificate contains either a key usage or basic constraint extension indicating that it may not be used as a Certificate

Environment

Release : All

Component : CCS390 - CA COMMON SERVICES FOR Z/OS

Resolution

The certificate has to be uploaded to the mainframe as ASCII with the WRAP option to a fie with LRECL=256 and RECFM=VB. 

If the wrap option is not used the certificate will be truncated and the IRRD126I error will be issued.

Use the following FTP commands to avoid truncation:

ASCII
QUOTE SITE WRAP LRECL=256 RECFM=VB
PUT cert_file_name 'your.mvs.dataset.name' (REPLACE
quit

Additional Information

See documentation section Obtain the Certificates for CA SMP/E Internet Service Retrieval and Configure IBM RACF Security