Troubleshooting
Problem
The PRTSTORE (Print System Store) command in QMGTOOLS allows the user to print the certificates in the *SYSTEM store and include a list that is expiring within the days specified. This command uses the QSYS2.CERTIFICATE_INFO IBM i Services table function.
https://www.ibm.com/docs/en/i/7.4?topic=services-certificate-info-table-function
This is only supported on R730 and later versions. It is not supported on R720.
Resolving The Problem
1. If the QMGTOOLS toolkit has not yet been installed, you should refer to the following document for information on how to download and install the QMGTOOLS toolkit on your IBM i server. The following URL contains additional information: http://www-01.ibm.com/support/docview.wss?uid=nas8N1011297
Note: If you just downloaded the tool, this can be ignored. GO QMGTOOLS/MG and take option 12. Please make sure the build date is June 2021 or later. If older than June 2021, download the current version of QMGTOOLS by following the steps in http://www.ibm.com/support/docview.wss?uid=nas8N1020468
2. GO QMGTOOLS/MG and take option 7.
3. Take Option 1 for DCM/SSL menu
4. Take option 6 for PRTSTORE
5. This presents the PRTSTORE command.
STORE_PWD: This is the *SYSTEM store password in DCM. The file it is using is /QIBM/UserData/ICSS/Cert/Server/DEFAULT.KDB. If the password is stashed, you can specify *NOPWD.
EXP_DAYS: The filter for the number of days to expiration. The default is 0, meaning that it will just show EXPIRED certificates. In the example below, it is set to 30, which means it will show a list of EXPIRED and EXPIRING certificates within 30 days. This will be in file EXPIRE_LISTING.txt in the IFS_PATH specified.
IFS_PATH: The IFS path where the STORE_LISTING.txt, EXPIRE_LISTING.txt and DCM_APP_LISTING.txt will be placed.
The QMGTOOLS/PRTSTORE command can be specified without using the menu options as well.
Example:
PRTSTORE STORE_PWD(SystemStorePasswordGoesHere) EXP_DAYS(30) IFS_PATH('/tmp/DCM')
or if password is stashed
PRTSTORE STORE_PWD(*NOPWD) EXP_DAYS(30) IFS_PATH('/tmp/DCM')
Output:
STORE_LISTING.txt : Listing of all the Certificates in the *SYSTEM store
EXPIRED_LISTING.txt: Listing of all the certificates that are expired.
EXPIRING_LISTING.txt: Listing of all the certificates that are set to expire within the number of days specified.
DCM_APP_LISTING.txt: Listing of all the server and client applications and what certificate they are assigned.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB68","label":"Power HW"},"Business Unit":{"code":"BU070","label":"IBM Infrastructure"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000CISAA2","label":"Digital Certificate Manager"}],"ARM Case Number":"","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.3.0;7.4.0;7.5.0"}]
Was this topic helpful?
Document Information
Modified date:
22 April 2024
UID
ibm16436133