Locating your PKI Services certificates and key ring

The IKYSETUP exec sets up the RACF® environment for PKI Services. After the setup is complete, you might need to go back and locate the PKI Services CA certificate, key ring, or the optional RA certificate, possibly to diagnose error conditions. You can do this by using various RACF TSO commands.

Before you begin

You need to determine the following setup information:

Table 1. Information you need for locating your PKI Services certificates and key ring
Information needed	Where to find this information	Record your value here
`ca_label` - The label of your CA certificate in RACF	See Table 1.
`ra_label` - The label of your RA certificate in RACF	See Table 1.
`ca_ring` - The PKI Services SAF key ring	See Table 1.
`daemon` - The user ID for the PKI Services daemon	See Table 1.
`log_dsn` - The data set name of the IKYSETUP log	See Table 1.
`cacert_dsn` - The data set name of your CA certificate as exported from RACF	See Table 1.