IRRD171I

Explanation
You are attempting to bind a certificate
to a z/OS® PKCS #11 token. The
certificate is found in RACF®.
However, the certificate has the following key type that is not supported
by z/OS PKCS #11, and therefore
the certificate cannot be bound: The key algorithm of the certificate is RSA or ECC, but the associated
private key is already stored in ICSF.

As a result, the certificate cannot be bound.

System action
 The command fails.

User response
Use another certificate for the bind
and reissue the command. If you must re-create the certificate, do
not use the options to store the key in PKDS (public key data set)
or the TKDS (token key data set) when generating the certificate.