Generate a local 3 certificate chain in ACF2

Products

• ACF2 - z/OS
• ACF2
• ACF2 - MISC

Issue/Introduction

This article documents how to locally generate 3 certificates in a chain using ACF2. The chain will include:

1. Root
2. Intermediate Root
3. Personal/client certificate

 

Resolution

Steps to generate 3 certificates in a chain:

1. Generate a local Root/Certificate Authority:
   
   GENCERT CERTAUTH.SIGNER SUBJSDN(.....) LABEL(MY COMPANY CA) EXPIRE(12/31/30)
   
   
2. Generate the Intermediate Root and sign it with the local Root:
   
   GENCERT FTPD.INTER SUBJSDN(.....) LABEL(MY INTERMEDIATE COMPANY CA) SIGNWITH(CERTAUTH.SIGNER)
   
   
3. Generate the client certificate and sign it with the Intermediate Root:
   
   GENCERT FTPD.CERT1 SUBJSDN(.....) LABEL(FTPD Certificate) SIGNWITH(CERTAUTH.INTER)

 

 

 

Additional Information

For more information, see ACF2 documentation sections GENCERT Subcommand and Digital Certificates Overview in Digital Certificate Use Case Videos.