Exchanging self-signed certificates on z/OS

Exchange the certificates you previously extracted. If we use FTP, use the correct format.

Procedure

Transfer the CA part of the QM1 certificate to the QM2 system and vice versa, for example, by FTP.

If you transfer the certificates using FTP, we must do so in the correct format.

Transfer the following certificate types in binary format:

• DER encoded binary X.509
• PKCS #7 (CA certificates)
• PKCS #12 (personal certificates)

Transfer the following certificate types in ASCII format:

• PEM (privacy-enhanced mail)
• Base64 encoded X.509

Parent topic: Work with SSL/TLS on z/OS