questions about acf2 certificate export functions

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

I have an acf2 certificate to install, and the current one is not connected to an "FTPD.RING1" ring.

Is this because it may be an SSL/TLS certificate, and this may be normal?

 

Also, if I export this certificate using the format and pass parameters as (in case it is a private certificate):

EXPORT CERTAUTH.XXXTEST DSN('DC.ACF2.CERTAUTH.DSSTEST') FORMAT(PKCS12b64) PASS(TEST123)                     or this format ...   

                                                                                                                           FORMAT(PKCS12DER)

would this hurt anything if I were to insert it at a later time? 

Environment

Release : 2.3

Component : CA ACF2 for z/OS

Resolution

If an ACF2 certificate that is not connected to a keyring it is not in use. 

The export format does not matter as long as the place where the certificate is exported to can use that format. For example, Windows cannot use PKCS12B64.

A certificate can always be inserted at a later time. So if a certificate is exported and then the certificate is inserted back into ACF2, it would overwrite the current certificate.