To add the DigiCert Global Root CA certificate to your RACF database, perform the
following steps:
- Download to your work station the DigiCert Global Root CA certificate file. Using your browser,
go to the Digicert Root Certificates Web page DigiCert Trusted Root Authority Certificates, find the DigiCert Global
Root CA in the list of Root Certificates, right-click the "Download" link for this certificate, and
use the "Save Link As..." action of your browser to download the certificate file to your
workstation.
- Upload the CA certificate to your z/OS system. There are many methods to transfer files from
your workstation to your z/OS system. For example, you can upload the certificate file with Personal
Communications 3270 or use TCP/IP FTP. The important things to remember are the certificate file
must be uploaded to z/OS as binary data, the certificate file must be stored in a sequential data
set, and the sequential data set must have RECFM=VB and LRECL>=256.
- After you have stored the certificate in a sequential data set, add it to your RACF database
using the following RACF command:
RACDCERT CERTAUTH ADD('ca-cert.dataset.name') +
WITHLABEL('DigiCert Global Root CA') TRUST
where
ca-cert.dataset.name is the name of the sequential data set used to
store the certificate received from the DigiCert Web site.
