Making CA certificates available to a queue manager on z/OS

After you have created your key ring, connect any relevant CA certificates to it.

If we have the CA certificate in a data set, we must first add the certificate to the RACF database by using the following command:

RACDCERT ID( userid1 ) ADD( input-data-set-name ) WITHLABEL( 'My CA' )

Then to connect a CA certificate for My CA to your key ring, use the following command:

RACDCERT ID(userid1)
CONNECT(CERTAUTH LABEL('My CA') RING(ring-name) USAGE(CERTAUTH))

where userid1 is either the channel initiator user ID or the owner of a shared key ring.

For more information about CA certificates, refer to Digital certificates.

Parent topic: Set up a key repository on z/OS