Steps for changing the runtime user ID on requests

Perform the following steps to change the runtime user ID for requesting a certificate.
  1. In the pkiserv.tmpl file, find the CONTENT subsection of the TEMPLATE section for the template whose user ID you want to change. Locate the lines containing the FORM statements, such as those in the following example:
    Example:
    <h3><li>Request a New Certificate
    # This ACTION forces userid/pw authentication and runs the task under
    # the client's ID
    #<FORM NAME="CertReq" METHOD=POST ACTION=
    #                "/PKIServ/ssl-cgi-bin/auth/careq.rexx" onSubmit=
    
    # This ACTION forces userid/pw authentication but runs the task under
    # the surrogate ID
    #<FORM NAME="CertReq" METHOD=POST ACTION=
    #              "/PKIServ/ssl-cgi-bin/surrogateauth/careq.rexx" onSubmit=
    
    # This ACTION is for non z/OS clients. The task runs under the
    # surrogate ID
     <FORM NAME="CertReq" METHOD=POST ACTION=
                   "/PKIServ/ssl-cgi-bin/careq.rexx" onSubmit=
    Notice that the preceding lines contain three FORM statements. The first two FORM statements are commented out, so they are not active. They are for:
    • Requesting the certificate under the client's ID and using user ID and password authentication
    • Requesting the certificate under the surrogate ID and using user ID and password authentication
    The third FORM statement is for requesting the certificate under the surrogate user ID without user ID and password authentication. This is active (it is not commented out).

    _______________________________________________________________

  2. To change the runtime user ID, remove the comment delimiter (#) from in front of the lines for the commented-out FORM statement you want to use and insert the comment delimiter in front of the lines for the bottom FORM statement.

    _______________________________________________________________