Command Functions › CHKCERT Function—Check Certificates

CHKCERT Function—Check Certificates

Valid on z/OS.

Use the CHKCERT command function to display information about digital certificates. For example, if a digital certificate in a data set (DCDSN) is in the CA Top Secret security file and associated with an ACID.

The administrator must have:

• MISC4(CERTCHEK) and MISC4 (CERTSITE) for CERTSITE ACID
• MISC4(CERTAUTH) for CERTAUTH ACID

This command function has the following format:

TSS CHKCERT DCDSN(input‑data‑set‑name)
            PKCSPASS('pkcs#12‑password')

• DCDSN

  Indicates the digital certificate in a specified data set.

• PKCSPASS

  The PKCSPASS('pkcs#12‑password') keyword is required if the data set contains a PKCS#12‑formatted certificate that is password protected. The PKCS‑PASSWORD is case‑sensitive and can contain blanks. The password associated with PKCS #12 certificates are not viewable. It is the CA Top Secret Administrator's responsibility to keep track of the PKCS #12 password assigned to the digital certificate.

  Range: Up to 255 characters