z/OS Cryptographic Services PKI Services Guide and Reference
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Define PKI Services certificate templates for IdenTrust certificate types

z/OS Cryptographic Services PKI Services Guide and Reference
SA23-2286-00

The IdenTrust document Identrus Public Key Infrastructure and Certificate Profiles [IT-PKI] identifies and details the various certificate types used within the IdenTrust infrastructure. Using PKI Services, you create your IdenTrust compliant certificates. You decide which IdenTrust certificate types your CA will create and then define certificate templates for them. You can use the sample certificate templates provided to create your IdenTrust compliant certificates.

IdenTrust compliant certificates must include the following:
  • IdenTrust certificate policy information (needed to build the CertificatePolicies extension)
  • The location of your OCSP responder (needed to build the AuthorityInformationAccess extension)
  • Other IdenTrust required fields and extensions.
The following sample PKI Services certificate templates are provided to help you create IdenTrust compliant certificates:

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014