Steps for changing the runtime user ID at retrieval

Perform the following steps to change the runtime user ID for retrieving a certificate.
  1. In the pkiserv.tmpl file, find the RETRIEVECONTENT subsection of the TEMPLATE section for the template whose user ID you want to change. Locate the lines containing the FORM statements, such as those in the following example:
    Example:
    <H1> Retrieve Your [tmplname]
<H3>Please bookmark this page
<p>Since your certificate may not have been issued yet, we recommend
that you create a bookmark to this location so that when you return to
this bookmark, the browser will display your transaction ID.
This is the easiest way to check your status.

# This ACTION forces userid/pw authentication and runs the task
# under the client's ID
#<FORM NAME=retrieveform METHOD=POST ACTION=
#      "/PKIServ/ssl-cgi-bin/auth/cagetcert.rexx" onSubmit=
#
# This ACTION forces userid/pw authentication but runs the task
# under the surrogate ID
#<FORM NAME=retrieveform METHOD=POST ACTION=
#      "/PKIServ/ssl-cgi-bin/surrogateauth/cagetcert.rexx" onSubmit=
#
# This ACTION is for non z/OS clients. The task runs under surrogate ID
 <FORM NAME=retrieveform METHOD=POST ACTION=
       "/PKIServ/ssl-cgi-bin/cagetcert.rexx" onSubmit=
    Notice that the preceding lines contain three FORM statements. The first two FORM statements are commented out (they are not active). These are for:
    • Retrieving the certificate under the client's ID
    • Retrieving it under the surrogate ID, but requiring user ID and password authentication.

    The third FORM statement is for retrieving the certificate under the surrogate user ID without user ID and password authentication. This is active (it is not commented out).

    _______________________________________________________________

  2. To change the runtime user ID, remove the comment delimiter (#) from in front of the lines for the commented-out FORM statement you want to use and insert the comment delimiter in front of the lines for the bottom FORM statement.

    _______________________________________________________________

Parent topic: Changing the runtime user ID