LABLPKDS Keyword

Valid on z/OS.

Use the LABLPKDS keyword to specify an optional label associated with the certificate private or public key being stored into the ICSF storage facility. Up to 64 characters can be specified for the label name.

This label is used as a descriptive identifier for a certificate ICSF key, and must be unique across the mvs complex.

This keyword has the following format:

TSS ADDTO(acid) LABLPKDS( PKDS—label—name/*)

PKDS-label-name

(Optional) Specifies the PKDS label of the record created in the ICSF Public Key Data Set (PKDS). The field is used in conjunction with the ICSF or PCICC keywords. If LABLPKDS is specified without the ICSF or PCICC keywords, an error message is displayed.

Specifiy (*) to take the value from the LABLCERT keyword. In that case, LABLCERT is specified along side LABLPKDS(*). If LABLPKDS(*) is specified without the LABLCERT keyword, an error message is displayed.

In either case, the PKDS label must conform to ICSF label syntax rules. The first character must be alphabetic or national. The field is folded to uppercase.

Valid characters: Alphanumeric, national (@,#,$) or period(.).

Range: Up to 64 characters

This keyword is used with:

The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
The commands GENCERT, ADDTO, and REKEY
ACID(MAINTAIN) for users within their scope, and MISC4(CERTGEN)
MISC4(CERTSITE) for SITE
ACID and MISC4(CERTAUTH) for CERTAUTH ACID.

Examples: LABLPKDS keyword

TSS ADD(user1) DIGICERT(cert0001)
               DCDSN(user.certificate.pfx12)
               LABLPKDS(user1.cert0002)
               ICSF

TSS ADD(user1) DIGICERT(cert0001)
               DCDSN(user.certificate.pfx12)
               LABLPKDS(*)
               ICSF
               LABLCERT(user1.cert0001.personel)