Recovering a CA certificate profile

Unless you change the IKYSETUP REXX exec to disable the function, IKYSETUP automatically backs up the PKI Services CA certificate and private key to a passphrase-encrypted data set that has PKCS #12 format, if the certificate and private key were created by software. (If the certificate was created by hardware, for example by RACDCERT with the PCICC keyword, it is not backed up.) If the CA certificate profile in the RACF® database is accidentally deleted, you can recover it by adding the certificate and private key back to the RACF database from the backup PKCS #12 data set.