I guess the certificate name,label name is conflicting with the one present in RACF Database. Best is to Take a backup or export the content to a dataset. Remove the certificate from the RACF DB with RACDCERT DELETE command. Then perform all the steps to add the newly signed certificate.
Note : Make sure the the existing certificate is not used by anyother application in your system. You can just check by RACDCERT CERTAUTH LIST. HTH On Wed, Nov 2, 2011 at 9:43 PM, Jorge Garcia <[email protected]> wrote: > Hello: > > We have a problem when we add a new signed trusted certificate. The step > finished with RC 04 and the message: IRRD109I The certificate cannot be > added. Profile xxxxxxxx000000000005.CN=Company[CA[RAIZ.O=Company is > already defined > > We detail the definition steps: > > 1 .- Create a new ring: RACDCERT ID(TCPIPC) ADDRING(KRSE1111BK) > 2 .- Create a new certificate (NONICSF): > RACDCERT ID(TCPIPC) GENCERT - > SUBJECTSDN(CN('VSIS') - > O('MAPFRE') OU('MAPFRE VIDA') C('ES')) - > ALTNAME(E('ZZL DGTP IT SOPORTE SISTEMAS Z/OS')) - > WITHLABEL('CERTIF. VSIS_1111BK') > 3 .- Generate a dataset from certificate: > RACDCERT ID(TCPIPC) - > GENREQ(LABEL('CERTIF. VSIS_1111BK')) - > DSN('SYS3.CERT.VIDA.VSIS.TCPIPC.F1111BK.NOMICSF') > 4 .- We send the certificate to a trusted certificate authority. They > return a signed certificate. We copy the content from this file to dataset > SYS3.CERT.VIDA.VSIS.TCPIPC.F1111BK.NOMICSF'. > 5 .- We add the new signed certificate to TCPIPC: > RACDCERT ID(TCPIPC) - > ADD('SYS3.CERT.VIDA.VSIS.TCPIPC.F1111BK.NOMICSF')TRUST - > WITHLABEL('CERTIF. VSIS_1111BK') > > It fails with IRRD109I The certificate cannot be added. Profile > xxxxxxxx000000000005.CN=Company[CA[RAIZ.O=Company is already defined > > We can't connect to TN3270. Fails with a problem with the signed > certificate authority. > > We remove all the keyrings active except KRSE1111BK. It doesn't work. > > Is possible delete or replace the profile?. > > Regards > > Jorge García Juanino > Técnico de Sistemas Z/Os > DGTP Departamento de Técnica de Sistemas > MAPFRE > Gobelas 47 - 49 2ª C y D > 28023 Madrid > Tfno: 91 581 27 34/ 618 33 35 59 > Fax: 91 581 24 01 > [email protected] > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
