To add the GeoTrust Global CA certificate to your RACF database,
perform the following steps:
- Download to your work station the GeoTrust Global CA certificate
(Root 2 - GeoTrust Global CA) from the GeoTrust website at https://www.geotrust.com/resources/root-certificates/index.html.
- Upload the CA certificate to your z/OS system. There are many
methods to transfer files from your workstation to your z/OS system.
For example, you can upload the certificate file with Personal Communications
3270 or use TCP/IP FTP. The important things to remember are the
certificate file must be uploaded to z/OS as text data, the certificate
file must be stored in a sequential data set, and the sequential data
set must have RECFM=VB and LRECL>=256.
- After you have stored the certificate in a sequential data set,
add it to your RACF database using the following RACF command:
RACDCERT CERTAUTH ADD('ca-cert.dataset.name') +
WITHLABEL('GeoTrust Global CA') TRUST
where
ca-cert.dataset.name is the name of the
sequential data set used to store the certificate received from the
GeoTrust Web site.