Keywords › FROMICSF Keyword—Specify Certificate Label

FROMICSF Keyword—Specify Certificate Label

Valid on z/OS.

Use the FROMICSF keyword to specify an optional label associated with the certificate private or public key being stored into the ICSF storage facility. Up to 64 characters can be specified for the label name.

This label is used as a descriptive identifier for a certificate ICSF key, and must be unique across the mvs complex.

This keyword has the following format:

TSS GENCERT(acid) FROMICSF( PKDS—label—name/*) 

PKDS-label-name

(Optional) Specifies that the public key for this certificate will be obtained from ICSF using the specified PKDS label. The private key of the source certificate, if one exists, will not be associated with the new certificate. FROMICSF cannot be specified with the DCDSN or LABLPKDS parameters. SIGNWITH must be specified when FROMICSF is specified.

The PKDS label must conform to ICSF label syntax rules. The first character must be alphabetic or national. The field is folded to uppercase.

Valid characters: Alphanumeric, national (@,#,$) or period(.).

Range: Up to 64 characters

This keyword is used with:

• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• The commands GENCERT
• ACID(MAINTAIN) for users within their scope, and MISC4(CERTGEN)
• MISC4(CERTSITE) for SITE
• ACID and MISC4(CERTAUTH) for CERTAUTH ACID.

Examples: FROMICSF keyword

This example specifies the optional FROMICSF label:

TSS GENCERT(user1) DIGICERT(cert0001) SIGNWITH(certauth,auth0001) FROMICSF(userx.certicsf)