USAGE for Root Certificates on Keyring

Document ID : KB000013228
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

When adding a root certificate to the keyring, what should USAGE be set to?

Answer:

Root certificate should have a USAGE of CERTAUTH. USAGE(PERSONAL) are for client certificates and not root certificates.

Example:

TSS ADD(acid) KEYRING(keyringname) RINGDATA(CERTAUTH,rootcert) USAGE(CERTAUTH)