Tom Longfellow wrote: > I tried to find an ftp path to a digicert location because I have pretty free >access for internet connections that the mainframe initiates.
You should have the z/OS Client Web Enablement Toolkit with its HTTP/HTTPS protocol enabler and REXX samples. Conceivably you could write (modify) a REXX script to fetch the root certificate file(s) over HTTPS using this HTTP/HTTPS protocol enabler that's provided with the base z/OS operating system. The REXX sample is HWTHXRX1. https://www.ibm.com/docs/en/zos/2.5.0?topic=toolkit-zos-httphttps-protocol-enabler https://www.ibm.com/docs/en/zos/2.5.0?topic=enabler-syntax-linkage-programming-considerations When you get "bootstrapped" you'll probably want to install curl for z/OS (or something functionally similar) to make this process easier. I can't advise you on how to comply with your organization's security requirements but (hopefully obviously!) encourage you to do so. ————— Timothy Sipples Senior Architect Digital Assets, Industry Solutions, and Cybersecurity IBM zSystems/LinuxONE, Asia-Pacific sipp...@sg.ibm.com ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN