Backup JCL or Commands for Certificates stored in ACF2 Database

Products

• ACF2 - z/OS

Issue/Introduction

Is there a job or command, besides the backup of the ACF2 databases, that will do certificate backups?
This is required if production signer/server certificates are deleted so they can be restored.

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

If the certificate is a personal certificate with a private key the certificate can be EXPORTed in PKCS12DER or PKCS12B64 format.

If the certificate is a CERTAUTH certificate the certificate can be EXPORTed in CERTDER or CERTB64 format.
Details of ACF2 EXPORT command can be found at this link.

https://techdocs.broadcom.com/us/en/ca-mainframe-software/security/ca-acf2-for-z-os/16-0/command-reference/acf-subcommands/export-subcommand.html