The irrcerta, irrmulti, and irrsitec user IDs

The irrcerta, irrmulti, and irrsitec user IDs are defined in USER profiles that are supplied with RACF® and cannot be defined by your installation. They are used to anchor certain profiles in the DIGTCERT and DIGTNMAP class that are not associated with individual user IDs, and cannot be used for any other purpose.

User certificates that you add using the RACDCERT ADD command with the CERTAUTH option are automatically associated with the user ID irrcerta.
User certificates that you add using the RACDCERT ADD command with the SITE option are automatically associated with the RACF user ID irrsitec.
Certificate name filters that you add using the RACDCERT MAP command with the MULTIID option are automatically associated with the RACF user ID irrmulti.

The use of these user IDs in DIGTCERT and DIGTNMAP profiles is automatic and cannot be changed using RACF commands. These user IDs cannot be administered using the ADDUSER, ALTUSER, DELUSER, LISTUSER and CONNECT commands. Since profiles that are associated with these user IDs contain lowercase characters, the SEARCH FILTER command is not intended for use in locating them and will deliver unpredictable results.

The irrcerta, irrmulti, and irrsitec user ID profiles should not be deleted. They must exist at initialization time or RACF initialization will automatically add them. In addition, the remove ID utility (IRRRID00) will not create commands to process these user IDs. For more information about IRRRID00 and the processing of DIGTCERT and DIGTNMAP profiles, see Finding residual IDs.