Keywords › FORMAT Keyword—Specify Certificate Format

FORMAT Keyword—Specify Certificate Format

Valid on z/OS.

Use the FORMAT keyword to specify the output format when exporting a digital certificate to an output data set.

This keyword has the following format:

TSS EXPORT(acid) DIGICERT(name)
                 DCDSN(dsname) 
                 FORMAT(format‑type)
                 PKCSPASS(PK12 password)

CERTB64

(Default) Indicates Base64 encoded certificates.

CERTDER

Indicates DER encoded X.509 certificates.

PKCS12B64

Indicates DER encoded (then Base64 encoded) PKCS#12 package.

PKCS12DER

Indicates DER encoded PKCS#12 package.

PKCS7B64

Specifies a B64 encoded PKCS#7 package.

PKCS7DER

Specifies a DER encoded PKCS#7 package.

If the certificate's private key resides in an ICSF storage facility and the format of PKCS12DER or PKCS12B64 is specified in the TSS EXPORT command, the command is rejected and a TSS0533E message is issued. You cannot export a digital certificate with ICSF.

ICSF is the interface to the cryptographic hardware on z/OS. You must have cryptographic hardware installed and enabled on your system.

This keyword is used with:

• The EXPORT command
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) authority for users
• MISC4(CERTEXPO) and MISC4(CERTSITE) authority for CERTSITE ACIDs
• MISC4(CERTAUTH) authority for CERTAUTH ACIDs