Making CA certificates available to a queue manager on z/OS®

After you have created your key ring, connect any relevant CA certificates to it.

If you have the CA certificate in a data set, you must first add the certificate to the RACF® database by using the following command:


RACDCERT ID( userid1 ) ADD( input-data-set-name ) WITHLABEL( 'My CA' )

Then to connect a CA certificate for My CA to your key ring, use the following command:


RACDCERT ID(userid1)
CONNECT(CERTAUTH LABEL('My CA') RING(ring-name) USAGE(CERTAUTH))

where userid1 is either the channel initiator user ID or the owner of a shared key ring.

For more information about CA certificates, refer to Digital certificates.