FORMAT Keyword—Specify Certificate Format

Keywords › FORMAT Keyword—Specify Certificate Format

FORMAT Keyword—Specify Certificate Format

Valid on z/OS.

Use the FORMAT keyword to specify the output format when exporting a digital certificate to an output data set.

This keyword has the following format:

TSS EXPORT(acid) DIGICERT(name)
                 DCDSN(dsname) 
                 FORMAT(format‑type)
                 PKCSPASS(PK12 password)

CERTB64: (Default) Indicates Base64 encoded certificates.
CERTDER: Indicates DER encoded X.509 certificates.
PKCS12B64: Indicates DER encoded (then Base64 encoded) PKCS#12 package.
PKCS12DER: Indicates DER encoded PKCS#12 package.
PKCS7B64: Specifies a B64 encoded PKCS#7 package.
PKCS7DER: Specifies a DER encoded PKCS#7 package.

If the certificate's private key resides in an ICSF storage facility and the format of PKCS12DER or PKCS12B64 is specified in the TSS EXPORT command, the command is rejected and a TSS0533E message is issued. You cannot export a digital certificate with ICSF.

ICSF is the interface to the cryptographic hardware on z/OS. You must have cryptographic hardware installed and enabled on your system.

This keyword is used with:

The commands CHECKCERT and EXPORT
The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
ACID(MAINTAIN) authority for users
MISC4(CERTEXPO) and MISC4(CERTSITE) authority for CERTSITE ACIDs
MISC4(CERTAUTH) authority for CERTAUTH ACIDs

Examples: FORMAT keyword

This example exports a digital certificate to a data set in Base64 format:

TSS EXPORT(user1) DIGICERT(cert0001)
                  DCDSN(udrt1.cert.data)
                  FORMAT(certb64)
                  PKCSPASS(secreto

This example exports a digital certificate to a data set in DER encoded X.509 format:

TSS EXPORT(user1) DIGICERT(cert0001)
                  DCDSN(udrt1.cert.data)
                  FORMAT(certder)
                  PKCSPASS(secreto

This example exports a digital certificate to a data set in Base64 PKCS#12 package format:

TSS EXPORT(user1) DIGICERT(cert0001)
                  DCDSN(udrt1.cert.data)
                  FORMAT(PKCS12B64)
                  PKCSPASS(secretone)

This example exports a digital certificate to a data set in DER encoded PKCS#12 package format:

TSS EXPORT(user1) DIGICER(cert0001)
                  DCDSN(udrt1.cert.data)
                  FORMAT(PKCS12DER)
                  PKCSPASS(secreto