TSS0491E Issuing TSS GENCERT In Batch When ALTNAME Spans Multiple Lines

Products

• Top Secret

Issue/Introduction

When trying to do a TSS GENCERT command with multiple ALTNAMEs that span more than 1 line, the following error occurs:

TSS0491E - ALTNAME CONTAINS AN INVALID KEYWORD - keyword

The command (issued in batch) is:

TSS GENCERT(CERTSITE)DIGICERT(certname) -
SUBJECTN('CN="common-name" -
O="organizational-name" L="locality" ST="state" -
PC="postal-code" C="country-code"')LABLCERT('label-name')KEYSIZE(keysize) -
ALTNAME('DOMAIN=domain_component1,domain_component2, -
domain_component3,domain_component4,domain_component5,domain_component6') -
NADATE(mm/dd/yy)SIGNWITH(acid,certname2)

Environment

Release : 16.0

Component : Top Secret for z/OS

Resolution

The ALTNAME field had a space between the comma (,) and the continuation character (-). Remove the space and re-issue the TSS GENCERT command.

The ALTNAME change is from:
ALTNAME('DOMAIN=domain_component1,domain_component2, -
domain_component3,domain_component4,domain_component5,domain_component6') -

to:
ALTNAME('DOMAIN=domain_component1,domain_component2,-
domain_component3,domain_component4,domain_component5,domain_component6') -