I believe the correct answer is "none of the above". From what I've been reading on these threads, the expired Cert was used on the front end, where processes are set up on z/OS to order maintenance etc. directly from the MF. I think this is the process that fell over, the pushing of the order to IBM. Once IBM has an order (thru ShopZ or the like) and they have it ready to download to your machine, the download thru SMP/E and the javatruststore is not impacted by these expired/expiring Certs.
I'm sure that if I'm wrong, somebody will quickly correct my error. :-) Rex -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Nightwatch RenBand Sent: Wednesday, January 24, 2018 11:59 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Update: Server Certificates Expiring - Sooner! Working on a zOS 1.13 system which will go away in a year, so may never need downloads, but curious about how this works anyhow. This system has no RACF keyrings so cannot have the old or new CA cert. I could only fine one .KBD /u/users/csmserv/r60/msm/dsi/cert/CA_SelfSigned_Server.kdb Which someone created before I got here and of course did not pass on the password to anyone. . However, the new DigiCert CA DOES exist in the LAN system, and I can display it and check the SN in my browsers. I did successfully download IBM software last September, using a batch job from the MF. I used SMPE and downloadkeyring="javatruststore" was that why it worked? OR, will it pick up the CA Cert from the LAN? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN The information contained in this message is confidential, protected from disclosure and may be legally privileged. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any disclosure, distribution, copying, or any action taken or action omitted in reliance on it, is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by replying to this message and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
