Certificates required on the FTP KEYRING in Top Secret

Products

• Top Secret

Issue/Introduction

 Are the Root and Intermediate Certificate required to be on the FTP KEYRING which is acting as an FTP server?

 

 

 

Resolution

The client, intermediate and root certificate must be present on the FTP server's started task acid in order for an SSL connection to be established with the FTP server.  The complete signing chain must be on the keyring.

1. Add the Personal Certificate to the keyring:

TSS ADD(ftpserveracid) KEYRING(keyringname) RINGDATA(certificateowner,digicertname) USAGE(PERSONAL) DEFAULT

2. Add the Intermediate Certificate to the keyring:

TSS ADD(ftpserveracid) KEYRING(keyringname) RINGDATA(certificateowner,digicertname) USAGE(CERTAUTH)

3. Add the Root Certificate to the keyring:

TSS ADD(ftpserveracid) KEYRING(keyringname) RINGDATA(certificateowner,digicertname) USAGE(CERTAUTH)