z/OS Cryptographic Services PKI Services Guide and Reference
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Steps for setting the expiration dates for the CA certificate and Web server certificate

z/OS Cryptographic Services PKI Services Guide and Reference
SA23-2286-00

Perform the following steps to set the expiration dates for the CA certificate and Web server certificate in IKYSETUP.

Procedure

  1. Comment out all instructions in "Part 3, Method 1" of IKYSETUP. These are the instructions that calculate expiration dates by adding the life spans specified in the ca_exyears and web_exyears variables to the date that IKYSETUP runs. You need to disable these instructions in order to set the expiration dates to specific dates. _______________________________________________________________
  2. Remove the comment delimiters from the sample instructions listed in "Part 3, Method 2" of IKYSETUP. These are the instructions that set the expiration dates to specific date values. You must enable these instructions.
  3. Change the value of the ca_expires variable to the date when the CA certificate should expire, in the format yyyy/mm/dd. _______________________________________________________________
  4. Change the value of the web_expires variable to the date when the Web server certificate should expire, in the format yyyy/mm/dd. Specify a date that is before the date specified by the ca_expires variable. _______________________________________________________________
  5. Save your changes. _______________________________________________________________

Results

When you are done, you have set the CA certificate expiration date and the Web server certificate expiration date that will take effect the next time that you run IKYSETUP.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014