Top Secret error message TSS1573I when adding IBM SMPE Internet Rertrieval certificate.

Products

• Top Secret

Issue/Introduction

When adding an IBM SMPE Internet Retrieval certificate to the Top Secret secuirty file with a:

TSS ADD(owningacid) DIGICERT(digicertname) DCDSN(datasetname) PKCSPASS(password)

the following error message is received: 

TSS1573I THE CERTIFICATE smpecert SIGNER NOT FOUND. ADDING CERTIFICATE WITH NOT TRUST STATUS                                                        

Environment

Release : 16.0

Component :

Resolution

TSS1573I THE CERTIFICATE smpecert SIGNER NOT FOUND. ADDING CERTIFICATE WITH NOT TRUST STATUS  

is an informational message indicating that the certificate is signed, but the signer is not on the security file.

This is normal when adding the IBM certificate downloaded for IBM SMPE Internet Retrieval.

Per the IBM SMPE Internet Retrieval doc, you will dowload two certificates. One from IBM and one from Geotrust.

The one from IBM will not provide a root and is not required.

Both certificates should be added to the security file and added to the keyring with USAGE(CERTAUTH).