Hello:
We have a problem when we add a new signed trusted certificate. The step
finished with RC 04 and the message: IRRD109I The certificate cannot be added.
Profile xxxxxxxx000000000005.CN=Company[CA[RAIZ.O=Company is already defined
We detail the definition steps:
1 .- Create a new ring: RACDCERT ID(TCPIPC) ADDRING(KRSE1111BK)
2 .- Create a new certificate (NONICSF):
RACDCERT ID(TCPIPC) GENCERT -
SUBJECTSDN(CN('VSIS') -
O('MAPFRE') OU('MAPFRE VIDA') C('ES')) -
ALTNAME(E('ZZL DGTP IT SOPORTE SISTEMAS Z/OS')) -
WITHLABEL('CERTIF. VSIS_1111BK')
3 .- Generate a dataset from certificate:
RACDCERT ID(TCPIPC) -
GENREQ(LABEL('CERTIF. VSIS_1111BK')) -
DSN('SYS3.CERT.VIDA.VSIS.TCPIPC.F1111BK.NOMICSF')
4 .- We send the certificate to a trusted certificate authority. They return a
signed certificate. We copy the content from this file to dataset
SYS3.CERT.VIDA.VSIS.TCPIPC.F1111BK.NOMICSF'.
5 .- We add the new signed certificate to TCPIPC:
RACDCERT ID(TCPIPC) -
ADD('SYS3.CERT.VIDA.VSIS.TCPIPC.F1111BK.NOMICSF')TRUST -
WITHLABEL('CERTIF. VSIS_1111BK')
It fails with IRRD109I The certificate cannot be added. Profile
xxxxxxxx000000000005.CN=Company[CA[RAIZ.O=Company is already defined
We can't connect to TN3270. Fails with a problem with the signed certificate
authority.
We remove all the keyrings active except KRSE1111BK. It doesn't work.
Is possible delete or replace the profile?.
Regards
Jorge García Juanino
Técnico de Sistemas Z/Os
DGTP Departamento de Técnica de Sistemas
MAPFRE
Gobelas 47 - 49 2ª C y D
28023 Madrid
Tfno: 91 581 27 34/ 618 33 35 59
Fax: 91 581 24 01
[email protected]
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
