I am trying to do a GENCERT of a certificate with the SIGNWITH parameter and I am getting message 'ACF68001 The SIGNWITH LABEL KEY value specified is invalid', what causes this error?

Document ID : KB000014144
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

I am trying to do a GENCERT of a certificate with the SIGNWITH parameter and I am getting message 'ACF68001 The SIGNWITH LABEL KEY value specified is invalid', what causes this error?

Answer:

The GENCERT will fails with message 'ACF68001 The SIGNWITH LABEL KEY value specified is invalid' if the LABEL field has quotes around the label.

The following GENCERT works with no quotes around the LABEL: 

GENCERT TEST.CERT SUBJ(CN=‘STOperations’ OU=‘MyCo’ C=US)
LABEL(TestServer) SIGNWITH(certauth Label(LocalACF CA)) 

The following GENCERT fails with quotes around the LABEL: 

GENCERT TEST.CERT SUBJ(CN=‘STOperations’ OU=‘MyCo’ C=US)
LABEL(TestServer) SIGNWITH(certauth Label('LocalACF CA')) 

ACF68001 The SIGNWITH LABEL KEY value specified is invalid 

The certificate LABEL(label) specifies a 32-character label to be associated with the certificate. The label can contain blanks and mixed-case characters but not special characters such as a quote.