DATACOM REST API generate keystore and truststore certificates

Products

• Datacom

Issue/Introduction

This article provides sample JCL to create the keystore and truststore certificates ( to be modified by the customer).

Environment

Z/OS USS

Datacom REST API 

Resolution

1. Create "etc" directory in the API installation directory
   % cd <apiinstalldir>
   % mkdir etc
2. Generate keystore and truststore
   % cd etc
    
   % ${JAVA_HOME}/bin/keytool -genkey -alias server -keyalg RSA -keystore keystore.p12 -storetype pkcs12 -dname "CN=Name, OU=MSD, O=Company, L=Plano, ST=TX, C=US" -storepass password -keypass password
    
   % ${JAVA_HOME}/bin/keytool -importkeystore -srckeystore keystore.p12 -srcstoretype pkcs12 -destkeystore truststore.p12 -deststoretype pkcs12 -srcstorepass password -deststorepass password
   
   Notes:
   1. Change details in the second command for '-dname "CN=Name, OU=MSD, O=Company, L=Plano, ST=TX, C=US"' as applicable
   2. The above two commands will generate/import keystore.p12 and truststore.p12 in/to /etc directory.

Additional Information

For documentation on the Datacom REST API , refer to Install the Datacom Systems REST API and Using the Datacom Systems REST API