CMMVC6215W Ensure that the system certificate is trusted by all key servers before running execute.
Explanation
A new cluster was created as part of the T4 store process. The new cluster has a new cluster (client) certificate. This certificate must be exported and installed on all key servers so that subsequent recovery commands in the execute phase, such as mkkeyserver, succeed.
User response
The system SSL certificate must be trusted by all key servers before you run the svcconfig restore -execute command. To export the system certificate, use the chsystemcert -export command and then install the certificate on the key servers. Alternately, to generate a signing request to be signed by a certificate authority, use the chsystemcert -mkrequest command and provide the Certificate Signing Request (CSR) to the certificate authority. To install the signed certificate, use the chsystemcert -install -file command.