ACF2 CHKCERT gets ACF68033 The password is incorrect for the CERTIFICATE against renewed certificate

Products

• ACF2 - z/OS
• ACF2
• ACF2 - MISC

Issue/Introduction

A certificate created outside of ACF2 is expiring. The cert was renewed and returned as a .pfx file.
Before trying to insert the cert into the database, a CHKCERT was run against the dataset but received an error:

CHKCERT DSN('SYSQ.CERT.PFX') PASSWORD(?????)
ACF68033 The password is incorrect for the CERTIFICATE  

Double checked with certificate creator and the password is correct.  

Resolution

To determine if the problem is with ACF2 CHKCERT or password related,  import the certificate using a web browser certificate wizard. Either Chrome or Microsoft Edge can be used.

If the password works then there is a problem with ACF2 and CHKCERT. See ACF2 INSERT or CHECKCERT of a PKCS12 certificate package results with ACF00184 or ACF68033 for a common scenario and workaround.

If the password fails from the certificate wizard then there is a problem with the certificate file or certificate file's password and new certificate should be requested.