Key ring verification
The key ring should appear as shown here, after all commands have been entered:
RACDCERT ID(user1) LISTRING(drq.ams.keyring)
Digital ring information for user USER1:
Ring:
>drq.ams.keyring<:
Certificate Label Name Cert Owner USAGE DEFAULT
-------------------------------- ------------ -------- -------
user1 ID(USER1) PERSONAL YES
RACDCERT ID(user2) LISTRING(drq.ams.keyring)
Digital ring information for user USER2:
Ring:
>drq.ams.keyring<:
Certificate Label Name Cert Owner USAGE DEFAULT
-------------------------------- ------------ -------- -------
user2 ID(USER2) PERSONAL YES
RACDCERT ID(WMQAMSD) LISTRING(drq.ams.keyring)
Digital ring information for user WMQAMSD:
Ring:
>drq.ams.keyring<:
Certificate Label Name Cert Owner USAGE DEFAULT
-------------------------------- ------------ -------- -------
AMSCA CERTAUTH CERTAUTH NO
user2 ID(USER2) SITE NO
User1 ID(USER1) SITE NO
Listing the individual certificates also shows the ring association.
RACDCERT ID(user2) LIST(label('user2'))
Digital certificate information for user USER2:
***
Label: user2
Certificate ID: 2QfH8Pny9/LzpKKFmfFA
Status: TRUST
Start Date: 2010/05/03 22:59:53
End Date: 2011/05/04 22:59:52
Serial Number:
>15<:
Issuer's Name:
>OU=AMSCA.O=ibm.C=us<:
Subject's Name:
>CN=user2.O=ibm.C=us<:
Key Usage: HANDSHAKE, DATAENCRYPT, DOCSIGN
Private Key Type: Non-ICSF
Private Key Size: 1024
Ring Associations:
Ring Owner: USER2
Ring:
>drq.ams.keyring<:
Ring Owner: WMQAMSD
Ring:
>drq.ams.keyring<:
To improve performance, the contents of the drq.ams.keyring associated with the AMS address space is cached for the life of the address space. Changes to that key ring do not become effective automatically. The administrator can refresh the cache by either:
- Stopping and restarting the queue manager.
- Using the z/OS® MODIFY command:
F qmgr AMSM,REFRESH KEYRING