The Broadcom SMP/E Internet Service Retrieval user certificate is going to expire and needs to be replaced.

Products

• COMMON SERVICES FOR Z/OS
• Top Secret

Issue/Introduction

The  Broadcom SMP/E Internet Service Retrieval user/client certificate is going to expire soon. How can a new user/client certificate be downloaded and configured?

Environment

Release : 16.0

Component : RECEIVE ORDER

Resolution

The new SMP/E Internet Retrieval Certificate can be found at the Broadcom Support Online Certificate site at https://eapi.broadcom.com/receiveorder/getSignedCert.

Here are sample commands to replace the expiring Broadcom User Certificate with the new version. 

1. Rename the LABLCERT of the expiring certificate since duplicate LABLCERTs are not allowed:
   
   TSS REP(CERTAUTH) DIGICERT(USERCERT) LABLCERT(EXPIREDCERT) 
   
   
2. Add the new user certificate to the security file using the old LABLCERT:
   
   TSS ADD(CERTAUTH) DIGICERT(USERCERT2) LABLCERT(CERTAUTH.USERCERT)
   
   
3. Remove the old user certificate from the keyring:
   
   TSS REM(JOE) KEYRING(SMPRING) RINGDATA(CERTAUTH,USERCERT)
   
   
4. Add the new user certificate to the keyring:
   
   TSS ADD(JOE) KEYRING(SMPRING) RINGDATA(CERTAUTH,USERCERT2) USAGE(CERTAUTH) 
   
   Please substitute your DIGICERT and LABLCERT name in the commands above.

Details can be found at Configure SMP/E Internet Service Retrieval.