Before you begin

You need to determine if the IBM® HTTP server is using SAF keyrings.

Verify that these lines are in httpd.main.conf:
sslmode on

sslport 443

keyfile mysslring SAF

If those lines do not exist in httpd.main.conf, stop, this diagnostic procedure does not apply.

If the operator console says:

00  ICH408I USER(WEBSERV ) GROUP(IMWEB   ) NAME(####################)         
       IRR.DIGTCERT.LISTRING CL(FACILITY)                                      
       INSUFFICIENT ACCESS AUTHORITY                                           
       ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )

You must give WEBSERV READ access to IRR.DIGTCERT.LSTRING in the FACULTY class. WEBSERV is the ID assigned to the web server process.