|
View previous topic :: View next topic
|
| Author |
Message |
Deepak_Raj
New User
Joined: 02 Nov 2025
Posts: 3
Location: India
|
|
|
|
I was adding a vendor Receive order Client/User certificate to RACF followed by a connect SMPE keyring, with below set of commands :
| Code: |
RACDCERT ADD('vendor.CLIENT') SITE +
PASSWORD('**********') WITHLABEL('vendor SMPE Client Certificate') TRUST
RACDCERT CONNECT(SITE +
LABEL('vendor SMPE Client Certificate') RING(smpering) +
USAGE(SITE)) ID(SMPE)
SETROPTS RACLIST(DIGTCERT, DIGTRING) REFRESH
|
The CA certificate was already present for its certificate authority.
After adding certificate, when I ran the RECEIVE Order job I received below error :
| Code: |
GIM69148S ** KEY RING SMPE/smpering ASSOCIATED WITH USERID SMPE WAS NOT FOUND.
|
I checked using LISTRING command and I see that USER ID 'SMPE' is present along with the 'smpering' keyring .
To fix this issue, I tried few random variations and when I used:
in RACDCERT CONNET, it worked!!!
The receive order job was able to reach the servers!
I did read through IBM documentations. As per my understanding we should use USAGE as SITE for client/user certificates and CERTAUTH for CA certificates. However, It did not work in my case and I had to use USAGE(CERTAUTH) for a client/user certificate.
Can anyone able to figure out how exactly USAGE parameter work in RACDCERT CONNECT command ? |
|
| Back to top |
|
 |
vasanthz
Global Moderator
Joined: 28 Aug 2007
Posts: 1750
Location: Tirupur, India
|
|
|
|
Since you get this,
| Code: |
| GIM69148S ** KEY RING SMPE/smpering ASSOCIATED WITH USERID SMPE WAS NOT FOUND. |
You can use the below command to list the keyring:
| Code: |
| RACDCERT ID(SMPE) LISTRING(smpering) |
It should list the added certificate label and other details, if it is properly added.
| Code: |
RACDCERT ADD('vendor.CLIENT') SITE +
PASSWORD('**********') WITHLABEL('vendor SMPE Client Certificate') TRUST |
In this command you can have SITE or CERTAUTH or ID. I usually use ID, in this case it would be ID(SMPE) instead of the SITE keyword. That way the owner of certificate would be SMPE. |
|
| Back to top |
|
|
Deepak_Raj
New User
Joined: 02 Nov 2025
Posts: 3
Location: India
|
|
|
|
Hey Vasanth,
Thanks for the reply.
I have checked the "smpering" keyring and certificates are available.
The question that I have here is on the behavior of USAGE keyword in the CONNECT command.
USAGE(SITE) for client/user certificate does not make my RECEIVE ORDER job to run but USAGE(CERTAUTH) makes it run. I could not find any technical answers for this in the documentation.
Do you happen to know anything on USAGE usage ? |
|
| Back to top |
|
|
|
|
