LABLCERT Keyword—Specify Certificate Label

Keywords › LABLCERT Keyword—Specify Certificate Label

LABLCERT Keyword—Specify Certificate Label

Valid on z/OS.

Use the LABLCERT keyword to specify a label associated with a certificate.

Up to 32 case‑sensitive‑characters can be specified for the label name. Spaces are allowed if you use single quotes.

This label is a descriptive identifier for a certificate and must be unique for the individual user. If a label is not specified, the label field defaults to the value specified in the DIGICERT keyword.

The keywords DIGICERT and DSDCN are mandatory. If the value specified in DIGICERT or LABLCERT already exists for this user, a message indicates this and the certificate is not added.

If the user did not specify LABLCERT, and the data set being processed is PKCS#12, the label is extracted from the PKCS#12 package and truncated to 32 characters, if required. If LABLCERT is not specified, or extracted from a PKCS#12 package, CA Top Secret uses the certificate name specified by keyword DIGICERT as the label for the certificate.

If DIGICERT and LABLCERT are specified, DIGICERT takes precedence over LABLCERT, except in ADDTO transactions.

This keyword has the following format:

TSS ADDTO(acid) DIGICERT(name)
                DCDSN(dsname)
                LABLCERT(label name)

This keyword is used with:

The commands ADDTO, EXPORT, GENCERT, GENREQ, LIST, P11TOKEN, REMOVE, RENEW and REPLACE
The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
ACID(MAINTAIN) and MISC4(CERTGEN) authority for users
MISC4(CERTSITE) authority for CERTSITE ACIDs
ACID(MAINTAIN) and MISC4(CERTAUTH) authority

Example: LABLCERT keyword

This example specifies LABLCERT label name when adding a user:

TSS ADDTO(USER01) DIGICERT(CERT0001)
                  DCDSN(USER1.CERT01)
                  LABLCERT(CASLABL000123)

This example uses a label as a handle instead of the serial number and issuer's distinguished name, and must be unique for the individual user:

TSS ADDTO(acid) DIGICERT(name) DCDSN(dsname)
                [START(sdate)]
                [FOR(date)|UNTIL(date)]
                [LABLCERT('label name')]
                [TRUST|NOTRUST|HIGHTRUST]