All, 

I am new to this certificate stuff. I have inherited this certificate in my 
RACF data base (apparently the only one that has a private key somewhere, no 
ICSF in use, and I have all RACF privileges):

Label: WebSphereCA
Certificate ID: 2QiJmZmDhZmjgeaFguKXiIWZhcPB
Status: TRUST
Start Date: 2009/11/12 07:00:00
End Date:   2019/01/01 06:59:59
Serial Number:
     >00<
Issuer's Name:
     >CN=WAS CertAuth for Security Domain.OU=BBNBASE<
Subject's Name:
     >CN=WAS CertAuth for Security Domain.OU=BBNBASE<
Key Usage: CERTSIGN
Key Type: RSA
Key Size: 1024
Private Key: YES
Ring Associations: *** No rings associated ***

I want to change the trust status to NOTRUST, which I currently don't see a way 
(rlist digtcert tells me it has application data=irrcerta):

racdcert alter(label('Websphere CA')) notrust -> IRRD105I No certificate 
information was found for user myuserid.
racdcert alter(label('Websphere CA')) notrust id(irrcerta) -> IRRD102I The user 
ID specified is not defined to RACF (same for IBMUSER, which was the id it was 
installed under)
racdcert alter(label('Websphere CA')) notrust certauth -> IRRD107I No matching 
certificate was found for this user. (Is this irrcerta? If so, why isn't it 
found?)
racdcert alter(label('Websphere CA')) notrust site -> IRRD105I No certificate 
information was found for user irrsitec.

How do I address this certificate? 

Barbara
                                                          

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to