Keywords › ISSUERDN and SERIALNUM Keywords—Identify Certificate

ISSUERDN and SERIALNUM Keywords—Identify Certificate

Valid on z/OS.

Use the ISSUERDN and SERIALNUM keywords to identify the digital certificate for the following transactions:

• Displaying digital certificate information
• Changing TRUST/NOTRUST status
• Removing a user's digital certificate

To identify the certificate you want to update, specify its:

• DIGICERT name
• LABLCERT name
• ISSUERDN and SERIALNUM. The ISSUERDN keyword is always used with the SERIALNUM keyword. ISSUERDN must be in single quotes.

This keyword has the following format:

TSS LIST(ACID) SERIALNUM(serial‑number)
               ISSUERDN('issuer's‑dist‑name')

This keyword is used with:

• The commands LIST, REPLACE, and REMOVE
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) and MISC4(CERTGEN) authority for users
• MISC4(CERTSITE) authority for CERTSITE ACIDs
• MISC4(CERTAUTH) authority for CERTAUTH ACIDs

Examples: ISSUERDN and SERIALNUM keyword

This example lists the contents of a digital certificate using the SERIALNUM/ ISSUERDN:

TSS LIST(user1) SERIALNUM(5C072BEA1234OU)
                ISSUERDN('OU=Class 1 Certificate.
                           O=BobsCertAuth, Inc.
                           L=internet.
                           C=US')

This example updates the TRUST status to trusted:

TSS REPLACE(acid1) SERIALNUM(5C072BEA1234OU)
                   ISSUERDN('Certificate.O=BobsCertAuth, Inc.L=internet.C=US')
                   TRUST

This example removes a user's digital certificate:

TSS REMOVE(user1) SERIALNUM(5C072BEA1234OU)
                  ISSUERDN('Certificate.O=BobsCertAuth, Inc.L=internet.C=US')

If the certificate being removed has a connection to a key ring, the certificate is removed along with any key ring connections it may have.