Why does the restore of a certificate that was EXPORTED lose the LABEL of the original certificate?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

Why does the restore of a certificate that was EXPORTED lose the LABEL of the original certificate?

 

Environment

Release: ACF2..001AO-15-ACF2
Component:

Resolution

The LABEL is part of the CERTDATA record and not part of the certificate. The label does not go with the certificate on an EXPORT. So when recovering(INSERT) of an EXPORTed certificate the desired LABEL must be specified on the INSERT of the CERTDATA record or it will default to the CERTDATA record id of the certificate. Normally this is not an issue because for most applications the LABEL does not matter, however for some applications such as MQ or NDM the LABEL does matter.