Multiple keyrings for CICS under Top Secret

Products

• Top Secret

Issue/Introduction

Multiple CICS regions use the same started task acid.

Is it possible to have multiple keyrings for each CICS region?

 

Environment

Release : 16.0

Component :

Resolution

There can be as many unique keyrings as you like on any acid to be used by applications such as, CICS Websphere, FTP, CA SMPE Internet Retrieval, etc….

Specify the unique keyring name in each application's configuration file so the application knows which keyring to use on the shared CICS region acid. 

Example:

1. Create the keyring.

TSS ADD(acid) KEYRING(xxxxxxx) LABLRING(xxxxxxx)

2. Add the certificate to the security file

TSS ADD(owner) DIGICERT(digicert) DCDSN(datasetname) PKCSPASS(password)

PKCSPASS keyword is required if the dataset is password protected.

3. Add certificates to the keyring.

TSS ADD(acid) KEYRING(xxxxxxxxxx) RINGDATA(owner,digicert) USAGE(PERSONAL or CERTAUTH)

Repeat steps 1 through 3 again for each keyring.