Keywords › USAGE Keyword—Certificate Trust Level

USAGE Keyword—Certificate Trust Level

Valid on z/OS.

(Optional) Use the USAGE keyword to indicate the trust level for a digital certificate being added to a key ring.

This keyword has the following format:

TSS ADDTO(acid) KEYRING(8‑byte name)
                [LABLRING(237‑byte ring name)]
                {RINGDATA(acid,digicert)}
                {RINGDATA(CERTSITE,digicert)}
                {RINGDATA(CERTAUTH,digicert)}
                [DEFAULT]
                [USAGE(PERSONAL|CERTSITE|CERTAUTH)]

PERSONAL

Specifies that the certificate is generated for a user.

CERTSITE

Specifies a higher level of trust, for example, from the installation site.

CERTAUTH

Specifies the highest level of trust, for example, from a certificate authority.

This keyword is used with:

• The commands ADDTO, P11TOKEN, REMOVE, and REPLACE
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) authority and MISC4(CERTUSER) FOR user IDs, MISC4(CERTSITE) for CERTSITE ACID, and MISC4(CERTAUTH) for CERTAUTH ACID.

Examples: USAGE keyword

This example indicates that a certificate is a site certificate:

TSS ADDTO(USERA) KEYRING(USERARNG)
                 RINGDATA(USERB,USERBCER)
                 USAGE(CERTSITE)

This example indicates that a certificate is a certificate authority :

TSS ADDTO(USERA) KEYRING(USERARNG)
                 RINGDATA(USERB,USERBCER)
                 USAGE(CERTAUTH)