Keywords › DEFAULT Keyword—Key Ring Default Certificate

DEFAULT Keyword—Key Ring Default Certificate

Valid on z/OS.

Use the DEFAULT keyword to specify that the digital certificate being added to a key ring is the default certificate for the key ring. Only one certificate within the key ring can be the default. If a default already exists, its DEFAULT status is removed, and the specified certificate becomes the default certificate.

This keyword has the following format:

TSS ADDTO(acid) KEYRING(8‑byte name)
               [LABLRING(237‑byte ring name)]
                \{RINGDATA(acid,digicert)\}
                \{RINGDATA(CERTSITE,digicert)\}
                \{RINGDATA(CERTAUTH,digicert)\}
               [DEFAULT]
               [USAGE(PERSONAL|CERTSITE|CERTAUTH)]

This keyword is used with:

• The commands ADDTO, P11TOKEN, REMOVE, and REPLACE
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) authority for users
• MISC4(CERTUSER) authority for user IDs
• MISC4(CERTSITE) authority for CERTSITE ACIDs
• MISC4(CERTAUTH) authority for CERTAUTH ACIDs

Example: DEFAULT keyword

This example indicates that this is the default certificate for a key ring:

TSS ADDTO(USER1) KEYRING(CASRING)
                 RINGDATA(USERA,USERACER)
                 DEFAULT