questions about acf2 certificate export functions

book

Article ID: 145168

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - DB2 Option CA ACF2 for zVM CA ACF2 - z/OS CA ACF2 - MISC

Issue/Introduction

I have an acf2 certificate to install, and the current one is not connected to an "FTPD.RING1" ring.

Is this because it may be an SSL/TLS certificate, and this may be normal?

 

Also, if I export this certificate using the format and pass parameters as (in case it is a private certificate):

EXPORT CERTAUTH.DSSTEST DSN('DC.ACF2.CERTAUTH.DSSTEST') FORMAT(PKCS12b64) PASS(TEST123)                     or this format ...   

                                                                                                                           FORMAT(PKCS12DER)

would this hurt anything if I were to insert it at a later time? 

Environment

Release : 2.3

Component : CA ACF2 for z/OS

Resolution

If an ACF2 certificate that is not connected to a keyring it is not in use. 

The export format does not matter as long as the place where the certificate is exported to can use that format. For example, Windows cannot use PKCS12B64.

A certificate can always be inserted at a later time. So if a certificate is exported and then the certificate is inserted back into ACF2, it would overwrite the current certificate.