Command Functions › P11TOKEN Function—Manage Certificates, Public Keys, and Private Key Objects

P11TOKEN Function—Manage Certificates, Public Keys, and Private Key Objects

Valid on z/OS.

Use the P11TOKEN command to:

• Create or delete a token
• Display information about objects in a token
• Connect a CA Top Secret digital certificate to an existing token
• Remove a certificate from a token
• Define a token certificate to CA Top Secret

Administrators must have:

• MISC3(PTOK) authority
• Administrators without MISC3(PTOK) authority must have:
  • UPDATE access to TSSCMD.DIGTCERT.P11TOKEN.ADD in the CASECAUT resource class to use the TOKENADD keyword
  • UPDATE access to TSSCMD.DIGTCERT.P11TOKEN.DELETE in the CASECAUT resource class to use the TOKENDEL keyword
  • UPDATE access to TSSCMD.DIGTCERT.P11TOKEN.BIND in the CASECAUT resource class to use the BIND keyword
  • UPDATE access to TSSCMD.DIGTCERT.P11TOKEN.UNBIND in the CASECAUT resource class to use the UNBIND keyword
  • UPDATE access to TSSCMD.DIGTCERT.P11TOKEN.IMPORT in the CASECAUT resource class to use the IMPORT keyword
  • USE access to TSSCMD.DIGTCERT.P11TOKEN.LIST in the CASECAUT resource class to use the TOKENLST keyword

This command function has the following format:

TSS P11TOKEN keyword keyword

This command function is used with the keywords TOKENADD, TOKENDEL, TOKENLST, BIND, UNBIND and IMPORT.