SCS Address Space Administration › Encrypted Communications › Implement Support for SSL Transmission › Create a Self-Signed Certificate Authority Certificate

Create a Self-Signed Certificate Authority Certificate

You can create a self-signed certificate authority certificate when setting up the SCS address space to use SSL.

Follow these steps:

1. From a mainframe console, execute gskkyman.
2. Select Open database, enter the path to the database that you created, and enter the database password.

   The Key Management menu appears.

3. Select Create a self-signed certificate.
4. Select certificate authority certificate with 1024-bit RSA key and select SHA-512.

   Note: Selecting certificate authority certificate with 1024-bit RSA key creates the certificate authority.

5. Enter a label for the self-signed certificate authority certificate and enter a common name.

   Note: The common name can be the same as the label.

6. Provide data for the prompts regarding ownership of the certificate. Ownership includes the following data:
   • Organizational unit
   • Organization
   • Organization city, state, and country
7. Enter the number of days the certificate is valid and enter 0 to continue.
8. Wait until the certificate is created.
9. Select Exit program.

   The self-signed certificate authority certificate is created.