TSS0470E CERTIFICATE NOT FOUND FOR SPECIFIED SIGNWITH

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Generated a new root certificate.

TSS GENCERT(CERTAUTH) DIGICERT(WEBSPRCA) -
SUBJECTN('CN="z/OSMF CertAuth for Security Domain" -
OU="IZUDFLT" -
O="sccompanies.com" -
C="US"') -
LABLCERT('ZOSMFCA') ICSF -
NADATE(06/30/25) NATIME(23:59:59) -
KEYUSAGE(CERTSIGN)

TSS0300I GENCERT FUNCTION SUCCESSFUL
TSS1624I CERTIFICATE WEBSPRCA HAS BEEN ADDED TO USER CERTAUTH

I want to create a new certificate and sign it with the new root, but receive the following error message:

TSS GENCERT(IZUSVR) DIGICERT(WEBSCERT) -
SUBJECTN('CN="companyABC.com" -
OU="IZUDFLT" -
O="IBM" -
C="US"') -
LABLCERT('DefaultzOSMFCert.IZUDFLT') -
ICSF -
NADATE(06/30/25) NATIME(23:59:59) -
SIGNWITH(CERTAUTH,ZOSMFCA)

TSS0470E CERTIFICATE NOT FOUND FOR SPECIFIED SIGNWITH
TSS0301I GENCERT FUNCTION FAILED, RETURN CODE = 4

Environment

Release:
Component: TSSMVS

Resolution

Use the DIGICERT name and not the LABLCERT name on the SIGNWITH.

TSS GENCERT(IZUSVR) DIGICERT(WEBSCERT) -
SUBJECTN('CN="companyABC.com" -
OU="IZUDFLT" -
O="IBM" -
C="US"') -
LABLCERT('DefaultzOSMFCert.IZUDFLT') -
ICSF -
NADATE(06/30/25) NATIME(23:59:59) -
SIGNWITH(CERTAUTH,WEBSPRCA)