Copy Certificate Authority From One Top Secret System To Another

Products

• WEB ADMINISTRATOR FOR TOP SECRET
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

What is the process to copy a Certificate Authority from one Top Secret system to another Top Secret system?

Environment

Release:
Component: AWAGNT

Resolution

1. Export a copy of the Certificate Authority to a dataset:
   TSS EXPORT(CERTAUTH) DIGICERT(digicertname) DCDSN(datasetname)
   FORMAT(PKCS12DER) PKCSPASS(password)
    
2. Verify the TSS EXPORT was successful.
   TSS CHKCERT DCDSN(dataset) PKCSPASS(password)
    
3. FTP the dataset in binary to the other CA Top Secret system.
    
4. Add the Certificate Authority to the security file:
   TSS ADD(CERTAUTH) DIGICERT(digicertname) LABLCERT(certificatelabelname)
   DCDSN(datasetname) PKCSPASS(password) TRUST
    
5. Add the certificate to the keyrings:
   TSS ADD(acid) KEYRING(keyringname) RINGDATA(CERTAUTH,digicertname)
   USAGE(CERTAUTH)