Keywords › DIGICERT Keyword—Identify a Digital Certificate

DIGICERT Keyword—Identify a Digital Certificate

Valid on z/OS.

Use the DIGICERT keyword to identify a digital certificate.

Note: You must use this keyword with ADDTO, ROLLOVER, GENCERT, DIGICERT, and REKEY functions with digital certificates.

When adding a DIGICERT using DCDSN that contains a PKCS12 package, the first certificate is added to the user with the signing certificates. The certificates are added to CERTAUTH ACID with label-generated names of AUTOXXX between 0 and 1000.

If an error occurs during the add function, certificates added to CERTAUTH are not backed out.

This keyword has the following format:

TSS COMMAND(acid) DIGICERT(name)
                 [DCDSN(dsname)]

name

Specifies a case-sensitive character ID that identifies the digital certificate to an ACID.

Length: 1 to 8 characters

This keyword is used with:

• The commands ADDTO, EXPORT, GENCERT, GENREQ, LIST, REKEY, REMOVE, RENEW, REPLACE, and ROLLOVER
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) and MISC4(CERTUSER) authority

Administrators without ACID(MAINTAIN) and MISC4(CERTUSER) authority need:

• UPDATE access to TSSCMD.CERTUSER.ADDTO in the CASECAUT resource class to ADD a certificate to a user ACID
• UPDATE access to TSSCMD.CERTUSER.REMOVE in the CASECAUT resource class to REMOVE a certificate from a user ACID
• UPDATE access to TSSCMD.CERTSITE.ADDTO in the CASECAUT resource class to ADD a site certificate
• UPDATE access to TSSCMD.CERTSITE.REMOVE in the CASECAUT resource class to REMOVE a site certificate
• UPDATE access to TSSCMD.CERTAUTH.ADDTO in the CASECAUT resource class to REMOVE a certificate-authority certificate
• UPDATE access to TSSCMD.CERTAUTH.REMOVE in the CASECAUT resource class to REMOVE a certificate-authority certificate

Example: Add a Certificate

This example adds a digital certificate with the name CERT0001 to USER1:

TSS ADDTO(USER1) DIGICERT(CERT0001)
                 DCDSN(USER1.CERT.DATA)

Example: List Certificates on a System

This example lists all the digital certificates on a system:

TSS LIST(ACIDS) DIGICERT(ALL)

Example: Remove a Certificate

This example removes the digital certificate from the Security File:

TSS REMOVE(USER1) DIGICERT(CERT0001)

Example: Roll Over a Certificate

This example rolls over a certificate with a REKEY certificate:

TSS ROLLOVER(myacid) DIGICERT(TEST)
                     NEWDIGIC(NEWTEST)

Example: Generate a Certificate Named TEST

This example generates a certificate named TEST within the acid record:

TSS GENCERT(myacid) DIGICERT(TEST)

Example: Generate a Certificate Based on Another Certificate

This example generates the new certificate NEWDIGIC based on a certificate in the DIGICERT field:

TSS REKEY(myacid) DIGICERT(TEST)
                  NEWDIGIC(NEWTEST)