Multiple keyrings for CICS under Top Secret

book

Article ID: 222472

calendar_today

Updated On:

Products

CA Top Secret

Issue/Introduction

Multiple CICS region's use the same started task acid.

Is it possible to have multiple keyrings for each CICS region?

 

Environment

Release : 16.0

Component :

Resolution

There can be many unique keyrings as you like on any acid to be used by applications CICS Websphere, FTP, CA SMPE Internet Retrieval, etc….

Specify the unique keyring name in each applications configuration file so the application know which keyring to use on the acid. 

Example:

1. Create they keyring.

TSS ADD(acid) KEYRING(xxxxxxx) LABLRING(xxxxxxx)

2. Add the certificate to the security file

TSS ADD(owner) DIGICERT(digicert) DCDSN(datasetname) PKCSPASS(password)

PKCSPASS keyword is required if the dataset password protected.

3. Add certificates to the keyring.

TSS ADD(acid) KEYRING(xxxxxxxxxx) RINGDATA(owner,digicert) USAGE(PERSONAL or CERTAUTH)

Repeat steps 1 through 3 again for each keyring.