Utilities

Table 1 lists the changes made to PKI Services utilities. For more detailed information, see z/OS Cryptographic Services PKI Services Guide and Reference.
Table 1. Summary of new and changed PKI Services utilities
Utility name Release Description Reason for change
pkiprereg z/OS® V2R1 Updated: Accepts four new RDNs: BUSINESSCATEGORY, JURISDICTIONCOUNTRY, JURISDICTIONSTATEPROV, and JURISTDICTIONLOCALITY. Support for Extended Validation (EV) certificates
iclview z/OS V2R1 Updated: The validity period and the location of the revocation information is displayed for each certificate. Release update
iclview z/OS V1R13 Updated: Added support for viewing entries in the issued certificate list (ICL) when it is implemented using DB2. DB2 repository for object store and issued certificate list (ICL)
vosview z/OS V2R1 Updated: Information that is not applicable to the first three records in the object store is no longer displayed. Release update
vosview z/OS V1R13 Updated: Added support for viewing entries in the object store when it is implemented using DB2. DB2 repository for object store and issued certificate list (ICL)
vsam2db2 z/OS V1R13 New: Copies data from the issued certificate list (ICL) and object store VSAM data sets into DB2 tables. DB2 repository for object store and issued certificate list (ICL)
createcrls z/OS V1R12 New: This new utility creates LDAP posting objects for certificate revocation lists (CRLs). The PKI Services daemon later posts the CRLs to an LDAP directory. You can use this program to create a CRL immediately, instead of waiting for PKI Services to do it automatically. Release update
postcerts z/OS V1R12 New: This new utility creates LDAP posting objects for certificates, which the PKI Services daemon later posts to an LDAP directory. You can use this utility if you have created certificates that PKI Services did not automatically post to an LDAP directory; for example if you created certificates before you configured PKI Services to automatically post them. Release update