eTrust CA-Top Secret Security for z/OS and OS ... - SupportConnect

Digital Certificate SupportDCDSN(output-data-set-name)—The data set will be allocated and cataloged,and will contain the ouput data set from the genreq’ed digital certificate. Thedata set name will conform to the MVS standards, up to a maximum of 26characters.DIGICERT—Specifies a one- to eight-character ID that identifies the certificatewith the user acid.LABLCERT—Specifies an optional and case-sensitive label to be associated withthe certificate being added to the user. Up to 32 characters can be specified forthe label name. Spaces are allowed if you use single quotes. This label is used asa handle instead of the serial number and issuer’s distinguished name, and mustbe unique for the individual user. If a label is not specified, the label field willdefault to the value specified within the DIGICERT keyword.Changing a User's CertificateUse the REPLACE command to update a user certificate.If the certificate has a connection to a user key ring, the certificate is replaced andall key ring connections continue with the new certificate. This lets you update auser's certificate without the need to reconnect the certificate to key rings.On a REPLACE command, the digital certificate that you want to update can beidentified three different ways: by using DIGICERT or LABLCERT, or by usingboth SERIALNUM and ISSUERDN.The syntax for the REPLACE command to replace as user certificate requires theDCDSN parameter as shown next.TSS REPLACE(acid|CERTAUTH|CERTSITE) DCDSN(dsname){DIGICERT(name)}{LABLCERT(label name)}{SERIALNUM(serial number) ISSUERDN(issuer's dist' name)}SERIALNUM—Specifies the certificate's serial number.ISSUERDN—Specifies the certificate issuer's distinguished name.Certificate Replacement (Renewal)As part of the TSS Replace command processing, a certificate can be replacedwithout deleting and reinserting it. To replace an existing certificate, make surethat one of the following three(3) cases is satisfied:Case #1. The certificate being added is a duplicate of the existing certificate(i.e.,has the same serial number and issuer’s distinguished name) and the labels andrecord keys of both certificates are the same;1–62 Cookbook