Copy a Certificate Authority from one CA Top Secret system to another CA Top Secret system.
book
Article ID: 17933
calendar_today
Updated On:
Products
CA CleanupCA Datacom - DBCA DatacomCA Datacom - ADCA Datacom - ServerCA CISCA Common Services for z/OSCA 90s ServicesCA Database Management Solutions for DB2 for z/OSCA Common Product Services ComponentCA Common ServicesCA Datacom/ADCA ecoMeter Server Component FOCCA Easytrieve Report Generator for Common ServicesCA Infocai MaintenanceCA IPCUnicenter CA-JCLCheck Common ComponentCA Mainframe VM Product ManagerCA Chorus Software ManagerCA On Demand PortalCA Service Desk Manager - Unified Self ServiceCA PAM Client for Linux for zSeriesCA Mainframe Connector for Linux on System zCA Graphical Management InterfaceCA Web Administrator for Top SecretCA CA- XpertwareCA Top SecretCA Top Secret - LDAPCA Top Secret - VSE
Issue/Introduction
Description:
Steps to copy a Certificate Authority from one CA Top Secret system to another CA Top Secret system.
Solution:
Export a copy of the Certificate Authority to a dataset: TSS EXPORT(CERTAUTH) DIGICERT(digicertname) DCDSN(datasetname) FORMAT(PKCS12DER) PKCSPASS(password)
Verify the TSS EXPORT was successful. TSS CHKCERT DCDSN(dataset) PKCSPASS(password)
FTP the dataset in binary to the other CA Top Secret system.
Add the Certificate Authority to the security file: TSS ADD(CERTAUTH) DIGICERT(digicertname) LABLCERT(certificatelabelname) DCDSN(datasetname) PKCSPASS(password) TRUST
Add the certificate to the keyrings: TSS ADD(acid) KEYRING(keyringname) RINGDATA(CERTAUTH,digicertname) USAGE(CERTAUTH)