Configuring and registering certificates
For each TEMS that will be using SPIPE and AT-TLS to communicate with IZSME, you must extract the certificate from TEMS, place it into a dataset, register the certificate in RACF, and attach it to the keyring.
The certificate should be extracted in a binary format such as Distinguished Encoding Rules (DER,
with the .der file extension) and transferred to a dataset for registration in
RACF. See Securing communications and Secure communication between components.
Attach certificate to RACF and to keyring
Customize this template to register the certificate in RACF and attach it to the keyring, so it can be used for AT-TLS communication.
RACDCERT CERTAUTH ID(<server_owner_id>) ADD(<htems_certificate_dataset>) TRUST WITHLABEL(<htems_cert_label>)
RACDCERT ID(<server_owner_id>) CONNECT(CERTAUTH LABEL(<htems_cert_label>) RING(<ring_name>))
Repeat this procedure for each TEMS that will be using SPIPE and AT-TLS with IZSME.
Finally, refresh the certificate profiles so that the changes will take effect.
SETROPTS RACLIST(DIGTRING,DIGTCERT) REFRESH