z/OSMF : Certificates Needed to Acquire Broadcom PSI and Import

Products

• ACF2
• Vantage Storage Resource Manager
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• COMMON SECURITY SERVICES

Issue/Introduction

When using z/OSMF to acquire a z/OSMF Broadcom portable software instance(PSI) and import Broadcom product information file into z/OSMF certificates may be needed.

To download the PSWI using HTTPS(optional) the intermediate 'DigiCert TLS RSA SHA256 2020 CA1' certificate is required. 

You can load the contents of the Broadcom product information file into z/OSMF from:

• The Broadcom FTP directory directly
• Your local workstation
• A z/OS data set or UNIX file
• z/OSMF Secure Download

For z/OSMF Secure Download, a Digicert root certificate 'DigiCert Global Root CA' is required.

Resolution

zOSMF Certificates

• For z/OSMF server IZUSVR(site defined certificates)
  
  - The CA certificate(or CA Signing chain of certificates) for the z/OSMF server
  - The server certificate for the z/OSMF server
  
  
• To use SMP/E RECEIVE command and the GIMGTPKG service routine to download the PSWI using HTTPS:
  
  Certificate link: DigiCert TLS RSA SHA256 2020 CA1 
  
  * Note: The user that submits the FTP JCL can use a virtual CERTAUTH keyring to
               authenticate the FTP server. The certificate does not need to be added to
               the keyring of the FTP user.
  
  Certificate information:
  Serial number:  06D8D904D5584346F68A2FA754227EC4   
  ISSUERDN(CN=DigiCert Global Root CA.OU=www.digicert.com.O=DigiCert Inc.C=US)
  SUBJDN(CN=DigiCert TLS RSA SHA256 2020 CA1.O=DigiCert Inc.C=US)
  
  
• To Import Broadcom Product Information into z/OSMF:
  
  Certificate link: DigiCert Global Root CA
  
  * Note: Certificate should be connected to the z/OSMF server IZUSVR keyring.
  
  Certificate information:
  Serial number: 083BE056904246B1A1756AC95991C74A                   
  ISSUERDN(CN=DigiCert Global Root CA.OU=www.digicert.com.O=DigiCert Inc.C=US)                                             
  SUBJDN(CN=DigiCert Global Root CA.OU=www.digicert.com.O=DigiCert Inc.C=US) 
   

 

Additional Information

For additional information, see Documentation:

Acquire a z/OSMF Portable Software Instance.

Import Product Information into z/OSMF