Cannot REMOVE Certificate Which Has Been GENREQed.

Document ID : KB000010110
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

 

We tried to issue TSS REM(Myacid) DIGICERT(Mydcert) 

 

and we got the following CA Top Secret error message:

 

TSS1628E Cannot REMOVE - Certificate has been GENREQed

 

How to get rid of this certificate from CA Top Secret?

Environment:
z/OS
Instructions:

 

You have to use the FORCE option to remove a GENREQed certificate.

 

TSS REM(Myacid) DIGICERT(Mydcert) FORCE

 

Be careful before removing with FORCE a certificate. 


If the certificate has not been added back once it has been signed by a CA, the private key will be lost. 

 

If the signed certificate has been added back to its original acid then private key has been reconnected, then FORCE can be used to remove the GENREQed certificate.


If the certifcate is not signed and is not use, then FORCE can be used. 

 

Additional Information:

 

If you want to have more details about CA Top Secret and Digital Certificates go to link:

 

https://docops.ca.com/ca-top-secret-for-z-os/16-0/en/using/digital-certificates