I am trying to do a GENCERT of a certificate with the SIGNWITH parameter and I am getting message 'ACF68001 The SIGNWITH LABEL KEY value specified is invalid', what causes this error?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

I am trying to do a GENCERT of a certificate with the SIGNWITH parameter and I am getting message 'ACF68001 The SIGNWITH LABEL KEY value specified is invalid', what causes this error?

Environment

Release:
Component: ACF2MS

Resolution

The GENCERT will fails with message 'ACF68001 The SIGNWITH LABEL KEY value specified is invalid' if the LABEL field has quotes around the label.

The following GENCERT works with no quotes around the LABEL: 

GENCERT TEST.CERT SUBJ(CN=‘cn’ OU=‘MyCo’ C=US)
LABEL(TestServer) SIGNWITH(certauth Label(label name)) 

The following GENCERT fails with quotes around the LABEL: 

GENCERT TEST.CERT SUBJ(CN=‘cn’ OU=‘MyCo’ C=US)
LABEL(TestServer) SIGNWITH(certauth Label('label name')) 

ACF68001 The SIGNWITH LABEL KEY value specified is invalid 

The certificate LABEL(label) specifies a 32-character label to be associated with the certificate. The label can contain blanks and mixed-case characters but not special characters such as a quote.