Digital Certificates › General Rules › Change a User's Certificate

Change a User's Certificate

You can update a user's certificate. If the certificate has a connection to a user key ring, the certificate is replaced and all key ring connections continue with the new certificate. This lets you update a user's certificate without the need to reconnect the certificate to key rings.

To identify the digital certificate to update, use:

• DIGICERT
• LABLCERT
• Both SERIALNUM and ISSUERDN

To change a user's certificate, enter the command:

TSS REPLACE(acid|CERTAUTH|CERTSITE) DCDSN(dsname)
             [DIGICERT(name)]
             [LABLCERT(label name)]
             [SERIALNUM(serial number)]
             [ISSUERDN(issuer's dist' name)]

SERIALNUM

Specifies the certificate's serial number.

ISSUERDN

Specifies the certificate issuer's distinguished name.

Example: REPLACE command

This example changes USER01's certificate:

TSS REPLACE(USER01) DIGICERT(DIGI0001)
                    DCDSN(USER1.CERT.DATA)