GIM69198S With Top Secret SMP/E Internet Service Retrieval Certificate

Products

• Top Secret

Issue/Introduction

When trying to run an SMP/E Internet Service Retrieval job, the following error occurs:

GIM69198S ** CERTIFICATE cccccc WAS NOT FOUND CONNECTED TO KEYRING keyring label

The following commands were done to add the certificate to the keyring:

TSS ADD(acid) DIGICERT(cccccc) DCDSN('data.set.name') LABLCERT('label cert') PKCSPASS(xxxx) TRUST
TSS REP(acid) DIGICERT(cccccc) TRUST
TSS ADD(acid) KEYRING(kkkkkk) LABLRING('keyring label') RINGDATA(acid,cccccc) USAGE(CERTAUTH) 

Environment

Release : 16.0

Component : Top Secret for z/OS

Resolution

Confirm that the TRUST attribute is set on the DIGICERT(cccccc) by issuing TSS LIST(acid) DIGICERT(cccccc) where 'acid' is the ACID that owns the certificate. 

If the certificate has the TRUST attribute, check the ORDERSERVER statement in the SMP/E Internet Service Retrieval JCL. Make sure the certificate= specifies the LABLCERT on the certificate, not the DIGICERT name.  For example, using the information from the TSS commands in the description:

     <ORDERSERVER
       url="https://url"
       keyring="acid/kkkkkk"
       certificate="label cert">
     </ORDERSERVER>