Keywords › DCDSN Keyword—Specify a Data Set Containing a Certificate

DCDSN Keyword—Specify a Data Set Containing a Certificate

Valid on z/OS.

Use the DCDSN keyword to specify one of the following types of data sets:

• MVS data set that contains the digital certificate (specified as part of an ADD, CHKCERT, GENCERT, or REPLACE command)
• MVS data set that will contain the output certificates (specified as part of an EXPORT or GENREQ command).

The following requirements apply:

• The data set must be defined as physical sequential (DSORG=PS).
• The data set must be variable blocked (RECFM=VB).
• You must specify the data set name as a fully qualified name (without quotation marks).
• The data set must be cataloged.
• The certificate contained in the data set must be BER-encoded, PKCS-7 BER-encoded, or Privacy Enhanced Mail (PEM)-encoded. PEM certificates must be transported to MVS as TEXT; other formats must be transported as BINARY.

This keyword is valid only with the DIGICERT or CERTMAP keyword and has the following format:

DCDSN(dataset_name)

dataset_name

Specifies the name of the data set containing the digital certificate or output certificate. Specify the data set name as a fully qualified name (without quotation marks).

Length: Up to 44 characters

This keyword is used with:

• The commands ADDTO, REPLACE, CHKCERT, GENCERT, GENREQ, and EXPORT
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) authority
• MISC4(CERTSITE) authority for CERTSITE ACID
• MISC4(CERTAUTH) authority for CERTAUTH ACID

Example: Add a Digital Certificate

This example adds digital certificate CERT0001 to USER1. The certificate is contained in z/OS data set USER1.CERT.DATA.

TSS ADDTO(USER1) DIGICERT(CERT0001)
DCDSN(USER1.CERT.DATA)

Example: Generate a Self-Signed Certificate Authority Certificate

This example generates a self-signed certificate authority certificate from a PKCS#10 request. The generated certificate is placed in data set CERTREQ.REQ.

TSS GENCERT(CERTAUTH) DIGICERT(Account)
DCDSN(CERTREQ.REQ) NBDATE(05/01/02) NADATE(05/01/03)