Are the Root and Intermediate Certificate required to be on the FTP KEYRING which is acting as an FTP server?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Question:

Are the Root and Intermediate Certificate required to be on the FTP KEYRING which is acting as an FTP server?

Answer:

The client, intermediate and root certificate must be present on the FTP server's started task acid in order for an SSL connection to be established with the FTP server.

1. Add the Personal Certificate to the keyring:

TSS ADD(ftpserveracid) KEYRING(keyringname) RINGDATA(certificateowner,digicertname) USAGE(PERSONAL) DEFAULT

2. Add the Intermediate Certificate to the keyring:

TSS ADD(ftpserveracid) KEYRING(keyringname) RINGDATA(certificateowner,digicertname) USAGE(CERTAUTH)

3. Add the Root Certificate to the keyring:

TSS ADD(ftpserveracid) KEYRING(keyringname) RINGDATA(certificateowner,digicertname) USAGE(CERTAUTH)

 

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component: