Skills for setting up PKI Services

The following table lists team members (alphabetically) and the tasks and skills needed for setting up PKI Services:
Table 1. Roles, tasks, and skills for setting up PKI Services
Role Tasks Required skills Documented in:
DB2® database administrator
  • Creates DB2 tables, package, and plan for the object store and issued certificate list (ICL).
  • DB2 programming skills
  • DB2 administration skills
  • Application Programming and SQL Guide
  • Command Reference
  • SQL Reference
for your version of DB2.
LDAP programmer
  • Customizes LDAP configuration for PKI Services
  • LDAP customization skills
MVS™ programmer
  • (Optionally) Creates VSAM object store and ICL data sets and indexes
  • (Optionally) sets up VSAM RLS
  • Starts the PKI Services daemon
  • Basic MVS skills
    • Editing a data set
    • ISPF COPY command
    • MVS console START command
  • JCL knowledge to change job card
  • Basic browser and web skills
RACF® administrator
  • Adds groups and user IDs
  • Sets up access control
  • Creates certificates
  • Sets up daemon security
  • RACF administration
  • REXX skills (for working with IKYSETUP REXX exec)
  • RACF commands such as:
    • ADDGROUP
    • ADDSD
    • ADDUSER
    • RACDCERT
    • RDEFINE
    • PERMIT
    • SETROPTS
  • TSO skills
UNIX programmer
  • Copies files
  • (Optionally) customizes environment variables
  • (Optionally) customizes (non-LDAP sections of) pkiserv.conf configuration file
  • Sets up /var/pkiserv directory
  • Updates the LDAP section of the pkiserv.conf configuration file
  • Basic UNIX commands, such as the cp (copy) command
  • Getting superuser authority
Start of changeWeb server programmerEnd of change Start of change
  • Helps set up PKI Services
    • If you are implementing the PKI Services web application using REXX CGI execs: Updates the IBM® HTTP Server - Powered by Apache configuration files and starts the IBM HTTP Server - Powered by Apache
    • If you are implementing the PKI Services web application using Java™Server pages (JSPs), updates the enterprise archive (EAR) file and deploys updated JSP files to a WebSphere Application Server.
  • Customizes the PKI Services web pages
End of change
Start of change
  • IBM HTTP Server - Powered by Apache customization skills
  • WebSphere Application Server customization and administration skills
  • Editing configuration files
  • Customizing the web pages
End of change
Start of changeWebSphere Application Server LibraryEnd of change