There might be confusion using terms "digital certificate label" and "keyring label" as well as "digital certificate name" and "keyring name".
Every time you encounter a word for digital certificate or keyring "LABEL", it's means you have to use what it is called in CA Top Secret terms:
LABLCERT (label-name) or LABLRING(ring name)
You must not use what it is called in CA Top Secret terms:
DIGICERT (8-byte-name) or KEYRING(key ring)
Those values are used internally by CA Top Secret and are used to administrate the digital certificates and keyrings with CA Top Secret .
To illustrate this, see below and an excerpt of a slapd.conf file using ssl:
where SSL_Ldap151_keyring_label and SSL_Ldap151_certificate_label are respectively the label of a keyring then of a digital certificate.
DIGICERT = LDAPSSL1 ACCESSORID = LDAP151
LABEL = SSL_Ldap151_certificate_label
KEYRING = L151KEYR ACCESSORID = LDAP151
KEYRING LABEL = SSL_Ldap151_keyring_label
Note the DIGICERT and KEYRING values compared to LABEL and KEYRING LABEL.
Release: TOPSEC00200-15-Top Secret-Security