Keywords › NADATE and NATIME Keywords—Date Certificate Expires

NADATE and NATIME Keywords—Date Certificate Expires

Valid on z/OS.

Use the NADATE and NATIME keywords to specify the effective date and time that the digital certificate expires. If no date is specified, it defaults to the active day and time plus 1 year. The expire date (NADATE) specified must be later than the active date (NBDATE).

The year specified must fall within the range 1950-2049. If an expire date is not also specified, the NBDATE year specified must fall within the range 1950-2048, since the NADATE date defaults to the active day and time plus one year.

The certificate DATE FORMAT are not governed by the DATE parm in CA Top Secret. The format is MM/DD/YY.

The NADATE specifies the “not active after” date of a certificate.

The NATIME specifies the “not active after” time of a certificate.

This keyword has the following format:

TSS REKEY(acid) NADATE(mm/dd/yy)
                NATIME(hh:mm:ss)

Date and time fields are optional, except if time is specified, date is required.

This keyword is used with:

• The GENCERT, REKEY and RENEW commands
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) and MISC4(CERTGEN) authority
• MISC4(CERTSITE) authority for CERTSITE ACID
• MISC4(CERTAUTH) for CERTAUTH ACID

Example: NADATE and NATIME keywords

This example specifies an effective date:

TSS REKEY(user1) DIGICERT(cert0001)
                 NEWDIGIC(CERT0002)
                 NADATE(09/01/07)
                 NATIME(00:00:01)

This example specifies an effective date:

TSS GENCERT(user1) DIGICERT(cert0001)
                   DCDSN(user1.cert.data)
                   NADATE(09/01/02)
                   NATIME(00:00:01)