Step 3: Create a RACF® key ring for the user ID under which the IKED is to run

Digital certificates are made available to the IKE daemon by connecting them to a key ring that is owned by the IKE daemon. To create a key ring for the IKE daemon, issue the following TSO command:

RACDCERT ID(IKED) ADDRING(ikeyring)

The value used for ikeyring is case sensitive.