Determining the signing certificate in Top Secret

Products

• Top Secret

Issue/Introduction

How does Top Secret determine what certificate signed another certifcate?

Environment

Release : 16.0

Component : Top Secret for z/OS

Resolution

Top Secret searches the Top Secret digital certificate table which is kept in memory.

The table is searched for a matching IDN (Issuer Distinguished Name) , then looks at the the AKI (signature with the public key) to determine if that certificate is the signer.

If there are multiple certificates that match the above criteria, the first one is used.