We are trying to use gencert to sign a certificate request generated by another certificate management software And we get the following error: 'ACF68027 Error during data set DECODE', how do I address the error?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

We are trying to use gencert to sign a certificate request generated by another certificate management software
And we get the following error: 'ACF68027 Error during data set DECODE', how do I address the error?

 

 

Environment

Release:
Component: ACF2MS

Resolution

Certificate Requests(CSR) that are to be signed by CA ACF2 should be FTP'd to z/OS as

a ASCII file as a VB file.

 

For Example:

 

FTP the CSR file to z/OS in ASCII format to file USER002.SAMPLE.CERT.CSR.

 

ISPF BROWSE of the file:

 

-----BEGIN NEW CERTIFICATE REQUEST-----                                 

MIIDIDCCAggCAQAwgaoxCzAJBgNVBAYTAkNBMQswCQYDVQQIEwJPTjEPMA0GA1UE        

BxMGR1VFTFBIMS8wLQYDVQQKEyZDTy1PUEVSQVRPUlMgR0VORVJBTCBJTlNVUkFO        

Q0UgQ09NUEFOWTESMBAGA1UECxMJU1NIMiBDR0lDMRowGAYDVQQMExFTT0ZUV0FS        

2vLs/DNgj8Ez2mwjvhEmS2n4USR42rLjDhUWTiu1qPa2GtT3EYA9WH1C1CTAnLRM        

JbkdF/r77nIyBg9tGqihR/w2DBrtpWw0qaLwPyRIVVfu+iDZEkS6cnfeNsOOlTfi        

gnk8iKb8X16szSaQQs+6wNAnv8ENqFjGbHDjhDUoVxV6ijOTrTYjfwt511GOBu2n        

I/2z1uGqicUMnUc4tDMwW79Wad2mZTnEjp45qP2DdPijUqSG                        

-----END NEW CERTIFICATE REQUEST-----       

 

Sample GENCERT to sign the CSR certificate:

 

ACF

SET PROFILE(USER) DIV(CERTDATA)

GENCERT SAMPLE.CERT DSN('USER002.SAMPLE.CERT.CSR') SIGNWITH(CERTAUTH.CERT1)