SCS Address Space Administration › Encrypted Communications › Implement Support for SSL Transmission › Create a Server Certificate

Create a Server Certificate

You can create a server certificate when setting up the SCS address space to use SSL.

Follow these steps:

1. From a mainframe console, execute gskkyman.
2. Select Open database, enter the path to the database that you created, and enter the database password.

   The Key Management menu appears.

3. Select Manage keys and certificates, and enter the number of the certificate authority certificate to use.

   Note: You can use the number that you previously created.

4. Select Create a Signed Certificate and Key, and select User or server certificate with 1024-bit RSA key.
5. Enter a label for the server certificate and enter a common name.

   Note: The common name can be the same as the label.

6. Provide data for the prompts regarding ownership of the certificate. Ownership includes the following data:
   • Organizational unit
   • Organization
   • Organization city, state, and country
7. Enter the number of days the certificate is valid and enter 0 to continue.
8. Wait until the certificate is created.
9. Select Exit program.

   The server certificate is created.