On 8/25/2018 10:28 AM, Jesse 1 Robinson wrote:
No Lone Ranger in Phoenixland. Same thing happened to us. This failure started
during the day on Thursday 23rd. It was OK in the morning, failing in the
afternoon. We waited till next day to open an SR in case it was one of those
transient problems. You know the kind. We got the advice in SR to issue this
command:
racdcert list(serial(023456)) certauth
What we were to look for was Status: TRUST plus association to SMPE Key Ring.
The certificate was there but as NOTRUST with no associations at all. We had
not changed anything on our side since we added the GeoTrust Global CA
certificate months ago. Until Thursday it was working.
The fix was to modify the cert to TRUST and add the SMPE keyring. Now it's
working fine. We may have overlooked some details when we added the cert. BTW
the serial '023456' was not mentioned in our SR doc, but RACF knew it.
Wow! We needed to issue: RACDCERT CERTAUTH ALTER(LABEL('GeoTrust Global
CA')) TRUST
The procedure is documented here:
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.gim3000/ecacert.htm
--
Phoenix Software International
Edward E. Jaffe
831 Parkview Drive North
El Segundo, CA 90245
https://www.phoenixsoftware.com/
--------------------------------------------------------------------------------
This e-mail message, including any attachments, appended messages and the
information contained therein, is for the sole use of the intended
recipient(s). If you are not an intended recipient or have otherwise
received this email message in error, any use, dissemination, distribution,
review, storage or copying of this e-mail message and the information
contained therein is strictly prohibited. If you are not an intended
recipient, please contact the sender by reply e-mail and destroy all copies
of this email message and do not otherwise utilize or retain this email
message or any or all of the information contained therein. Although this
email message and any attachments or appended messages are believed to be
free of any virus or other defect that might affect any computer system into
which it is received and opened, it is the responsibility of the recipient
to ensure that it is virus free and no responsibility is accepted by the
sender for any loss or damage arising in any way from its opening or use.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
