We need to put a certificate from a UNIX server on our ACF2 database for FTP. What is the process?

Document ID : KB000026312
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

We received a certificate from the UNIX server and it is on our PC. The certificate needs to be moved to the mainframe and added to a keyring for FTP.

Solution:

The certificate on the PC should be FTPd to a dataset on the mainframe in BINary format. Pre-define the dataset on the mainframe with the DCB options of FORMAT=VB,LRECL=84,BLKSIZE=27998. Issue a CHKCERT against the dataset to verify the certificate looks correct. Issue an INSERT from that dataset to create the CERTDATA record. Connect the CERTDATA record to the FTP server's KEYRING record.

On the mainframe:
CHKCERT DSN('UNIX.cert1')
SET PROFILE(USER) DIV(CERTDATA)
INSERT UNIX.cert1 DSN('UNIX.cert1') TRUST
F ACF2,REBUILD(USR),CLASS(P)
F ACF2,OMVS(CERTDATA)
CONNECT CERTDATA(UNIX.cert1) KEYRING(FTPD.RING1)