After Generating a Digital Certificate, How Does One Export It?

Products

• Cleanup
• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

Description:

After generating a digital certificate, how does one export it and be sure the private key is in there to be added to other key rings?

Solution:

Use the following format of the EXPORT command to export a digital certificate with its private key:

 	TSS EXPORT(USERA) DIGICERT(USERCERT) DCDSN(Your.export.dataset) FORMAT 	(PKCS12DER) PKCSPASS(PKCSpassword)

And add it (import it) to an acid on another location (ie a different cpu):

 	TSS ADD(USERA) DIGICERT(USERCERT) DCDSN(Your.export.dataset) LABLCERT(USERA_CERT) PKCSPASS(PKCSpassword) TRUST 

Then add it to the required key ring with:

 	TSS ADD(USERB) KEYRING(USRBRING) RINGDATA(USERA,USERCERT) DEFAULT USAGE(PERSONAL)

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component: