What Is The Difference Between A Digital Certificate Label And A Keyring Label? Also, What Is The Difference Between A Digital Certificate Name And A Keyring Name?
search cancel

What Is The Difference Between A Digital Certificate Label And A Keyring Label? Also, What Is The Difference Between A Digital Certificate Name And A Keyring Name?

book

Article ID: 17914

calendar_today

Updated On:

Products

Cleanup Datacom DATACOM - AD CIS COMMON SERVICES FOR Z/OS 90S SERVICES DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS COMMON PRODUCT SERVICES COMPONENT Common Services CA ECOMETER SERVER COMPONENT FOC Easytrieve Report Generator for Common Services INFOCAI MAINTENANCE IPC UNICENTER JCLCHECK COMMON COMPONENT Mainframe VM Product Manager CHORUS SOFTWARE MANAGER CA ON DEMAND PORTAL CA Service Desk Manager - Unified Self Service PAM CLIENT FOR LINUX ON MAINFRAME MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME GRAPHICAL MANAGEMENT INTERFACE WEB ADMINISTRATOR FOR TOP SECRET Xpertware Top Secret Top Secret - LDAP Top Secret - VSE

Issue/Introduction

Description:

There might be confusion using terms "digital certificate label" and "keyring label" as well as "digital certificate name" and "keyring name".

Solution:

Every time you encounter a word for digital certificate or keyring "LABEL", it's means you have to use what it is called in CA Top Secret terms:

LABLCERT (label-name) or LABLRING(ring name)

You must not use what it is called in CA Top Secret terms:

DIGICERT (8-byte-name) or KEYRING(key ring)

Those values are used internally by CA Top Secret and are used to administrate the digital certificates and keyrings with CA Top Secret .

To illustrate this, see below and an excerpt of a slapd.conf file using ssl:

TLSKeyringName LDAP151/SSL_Ldap151_keyring_label
TLSCertificateLabel SSL_Ldap151_certificate_label

where SSL_Ldap151_keyring_label and SSL_Ldap151_certificate_label are respectively the label of a keyring then of a digital certificate.

DIGICERT = LDAPSSL1 ACCESSORID = LDAP151
LABEL = SSL_Ldap151_certificate_label

KEYRING = L151KEYR ACCESSORID = LDAP151
KEYRING LABEL = SSL_Ldap151_keyring_label

Note the DIGICERT and KEYRING values compared to LABEL and KEYRING LABEL.

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component: