Is it possible to create Multiple Certificates with the same Subject Distinguish Name (like CN OU OU)?
search cancel

Is it possible to create Multiple Certificates with the same Subject Distinguish Name (like CN OU OU)?

book

Article ID: 218812

calendar_today

Updated On:

Products

ACF2 ACF2 - MISC ACF2 - z/OS Top Secret

Issue/Introduction

With ACF2, Top Secret, RACF, Is it possible to create Multiple Certificates with  the same Subject Distinguish Name/SUBJ/SUBJDN (like CN OU OU)?

Resolution

Multiple certificates can be created(GENCERT) with the same Subject Distinguished Name with the following restrictions.
1) If the owner is the same, the label and serial number must be unique.
2) If the owner is not the same, the serial number must be unique. 

ACF2 Certificate Ownership
Sample ACF2 GENCERT, FTPD is the owner:
GENCERT
FTPD.CERT SUBJ(CN='FTPd Server Certificate')

Top Secret Certificate Ownership
Sample TOP SECRET GENCERT, FTPD is the owner:
TSS GENCERT(
FTPD) DIGICERT(FTPSCERT) SUBJECTN('CN='FTPd Server Certificate')

RACF Certificate Ownership
Sample RACF GENCERT, FTPD is the owner:
RACDCERT GENCERT ID(
FTPD) SUBJECTSDN(CN('FTPd Server Certificate')