How do you send a certificate to an external Certificate Authority for signing in ACF2?

book

Article ID: 186160

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - DB2 Option CA ACF2 for zVM CA ACF2 - z/OS CA ACF2 - MISC

Issue/Introduction

How do you send a certificate to an external Certificate Authority for signing in ACF2?

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

To create a new certifiacte do a GENCERT of the certificate you would like to create.  From the ACF prompt enter commands:
set profile(user) div(certdata)
GENCERT ABC.CERT subj(subject details) label(yourlabel)

Followed by a GENREQ putting the newly created certificate into a dataset. From the ACF prompt enter command:
set profile(user) div(certdata)
genreq ABC.CERT DSNAME('dataset.name')

Then ftp and send the CSR to the external signer. Once the certificate is signed and placed back into a dataset. Do an insert of the same certificate from the dataset. From the ACF prompt enter command:
INSERT ABC.CERT DSNAME('dataset.name')