eTrust CA-Top Secret Security for z/OS and OS ... - SupportConnect

Digital Certificate SupportAn additional feature of eTrust CA-Top Secret lets you check to see if a certificatehas already been added to the eTrust CA-Top Secret Security File and with whatacid it is associated. Also, once a certificate has been added to eTrust CA-TopSecret it can be exported to a new data set.See the Command Functions Guide for expanded details beyond what ispresented in this Cookbook.The user ACID record can be administered with the TSS ADDTO, REPLACE,REMOVE, GENCERT, GENREQ, EXPORT, and CHKCERT commands.■■■■■■Use ADD and REPLACE to add or replace a certificate, label, or the START,FOR, UNTIL, TRUST, HITRUST and NOTRUST parameters.Use REMOVE only to remove the certificate from the user.Use GENCERT to generate a certificate from eTrust CA-Top Secret and addit to a user.Use GENREQ to generate a PKCS#10 base 64-encoded digital certificaterequest and writes it to a data set.Use EXPORT to export a certificate from eTrust CA-Top Secret to a new dataset.Use CHKCERT to see if a certificate has been added to the eTrust CA-TopSecret security file and with what acid it is associated.Associating a Unique Digital Certificate with a UserDigital certificates issued by a certificate authority are associated with a user byadding the certificate to the user's ACID record, or the predefined acidCERTAUTH or CERTSITE. If eTrust CA-Top Secret generates a certificate it isadded to the user's ACID record when the certificate is created using the TSSGENCERT command.The certificate must be unique to the user. A certificate can be added to only oneuser's ACID record. Certificates can be shared only when they are attached to akey ring.1–52 Cookbook