> I did finally get the Certificate loaded, defined and attached to my SMPE 
> keyring.

> The jobs still fail mysteriously.    The only clue being that displaying the 
> new key via RACF says that it is 'Incomplete'

I don't know about your RACF "incomplete" issue, but I suggest you double check 
you have the correct root certificate in the correct keyring:

There are two kinds of servers for an SMP/E RECEIVE ORDER request: the order 
server, and the download server.  They are different.  The order servers, like 
eccgw01.boulder.ibm.com, still use the “DigiCert Global Root CA” root cert.  
The download servers, like deliverycb-bld.dhe.ibm.com, recently changed to use 
the "DigiCert Global Root G2” root certificate.  The keyring specified in the 
ORDERSERVER XML must contain the CA root certificate for the order server.  The 
downloadkeyring specified in the CLIENT XML must contain the CA root 
certificate for the download server.

Kurt Quackenbush
IBM  |  z/OS SMP/E and z/OSMF Software Management  |  ku...@us.ibm.com

Chuck Norris never uses CHECK when he applies PTFs.


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to