Keywords › CERTFLAG Keyword—Set or Reset Digital Certificate Flags

CERTFLAG Keyword—Set or Reset Digital Certificate Flags

Valid on z/OS.

Use the CERTFLAG keyword to set or reset digital certificate flags.

This keyword has the following format:

TSS REPLACE(acid) DIGICERT(name) 
                  CERTFLAG(NOGENREQ|GENREQ)

acid

Specifies the ACID affected by the REPLACE function.

name

Specifies a case-sensitive character ID that identifies the digital certificate to an ACID.

Length: 1 to 8 characters

NOGENREQ

Turns off the GENREQ indicator for a digital certificate that has had a GENREQ issued for it. Use this specification only in the following situations:

• You specified GENREQ when REKEY was intended.
• You specified REKEY when GENREQ was intended.

During normal processing, inserting a signed certificate over the GENREQ’d certificate turns off the GENREQ indicator.

GENREQ

Indicates that the CERTDATA record has been the target of a GENREQ command. We recommend not using the change command to turn on this indicator, because the GENREQ command will turn on the indicator.

This keyword is used with:

• The REPLACE command
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) and MISC4(CERTGEN) authority for users
• MISC4(CERTSITE) authority for CERTSITE ACIDs
• MISC4(CERTAUTH) authority for CERTAUTH ACIDs

Example: Reset a Flag for a Digital Certificate

This example resets a flag for a digital certificate by turning off the GENREQ indicator:

TSS REPLACE(USER1) DIGICERT(TEST) CERTFLAG(NOGENREQ)