CA Top Secret How to change a certificate on a Keyring from DEFAULT(NO) to DEFAULT(YES)

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Question:

 

How can you change an existing digital certificate DEFAULT attribute on a Keyring

from NO to YES?

 

Answer:

 

In order to change a certificate to default you use the REPLACE command. 

A keyring can only have one DEFAULT certificate so if you issue the REPLACE 

making a different certificate the default and then refresh the acid, it 

should rmove the DEFAULT from the first acid. The command would be 

similar to below: 

TSS REPL(owner_acid) KEYRING(keyring) RINGDATA(owner,cert) DEFAULT USAGE(PERSONAL) 

 

 

Additional Information:

 

https://docops.ca.com

 

 

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component: