TOKENLST Keyword—PKCS#11 Token Certificate Object Information

Valid on z/OS.

Use this keyword with the P11TOKEN function to display information about certificate objects in a specific PKCS#11 token.

This keyword has the following format:

TSS P11TOKEN TOKENLST LABLCTKN(token name)

LABLCTKN(token name): The name of the token being listed. Use the * character at the end of the name to indicate a mask or by itself to list all tokens.

This keyword is used with MISC3(PTOK) authority.

Also controlled by ICSF using resources in the CRYPTOZ class and by authorization to resource IRR.DIGTCERT.LIST in the IBMFAC class.

To list RACF information using this keyword the authority required:

For one's own certificate is sufficient authority to CRYPTOZ resources and READ authority to IRR.DIGTCERT.LIST
For some else's certificate is sufficient authority to CRYPTOZ resources and UPDATE authority to ORR.DIGTCERT.LIST
For CERTSITE or CERTAUTH certificates is sufficient authority to CRYPTOZ resources and CONTROL authority to IRR.DIGTCERT.LIST

This example displays information about the token LV2TOKEN::

TSS P11TOKEN TOKENLST LABLTKN(LV2TOKEN)