Generating a self signed certificate

About this task

This certificate is used as the certificate-authority certificate. In our example, we used the default encryption algorithm, which is RSA, and the default encryption strength, which is 1024 bits.
Important: Be careful which user ID you use for these commands. Use the same user ID as HyperSwap. If another user ID is used, AT-TLS cannot access the necessary key ring to fetch the certificates and the setup will not work. In this example, a user ID of SETUP is used.
The RACF RACDCERT command to generate a certificate has the following parameters:
OU
organization-unit-name
O
organization-name
C
country

Example

Issue the RACF command shown in the following example to generate the certificate.
Sample RACF RACDCERT command
RACDCERT GENCERT CERTAUTH SUBJECTSDN (OU('TPCR Certificate Authority')
O('tpcr') C('us')) KEYUSAGE(CERTSIGN)
WITHLABEL('TPCR Local Certificate Authority')