After you perform the RACF updates to add certificates, you might need to refresh the in-storage RACF profiles. That is, if you choose to RACLIST the DIGTCERT and DIGTRING classes, you must first activate them using the following RACF command:

SETROPTS CLASSACT(DIGTCERT DIGTRING)

If you have used RACLIST for the DIGTCERT or DIGTRING classes, you need to refresh the in-storage profiles before the updates can take affect. You can use the following RACF command:

SETROPTS RACLIST(DIGTCERT DIGTRING) REFRESH

If you have not used RACLIST for the DIGTCERT or DIGTRING classes, you do not need to refresh the in-storage profiles.