Updating pkiserv.conf after installing a new release of z/OS

After you install a new release of z/OS®, you have two versions of the pkiserv.conf file on your system:
  • The version that you used on the previous release of z/OS, which contains the changes you made to configure PKI Services.
  • The sample version shipped with the new release of z/OS, which contains changes that IBM® made to support the new function shipped in the release. This version does not contain any of your configuration changes.
You can continue to use the version from the previous release, but you might not be able to use the new function shipped in the new release until you merge the configuration changes you made in your version of the file with the updates that IBM made in the version shipped in the new release. One approach to merging the files is to compare your version of pkiserv.conf with the new sample version, located by default in the /usr/lpp/pkiserv/samples/ directory. Update your version to match the changes made to the sample version. You should be able to cut and paste between the two versions of the file. To identify the lines that changed, you can refer to the sample of pkiserv.conf in The pkiserv.conf configuration file, which marks the lines that were changed with a bar in the left margin. But be aware that the sample shown might not be identical to the sample shipped with PKI Services.