Once your certificates are created, it might be necessary for you to transfer a certificate to another key database or z/OS® PKCS #11 token on your system or a remote system. This transfer maybe necessary for these reasons:

• The remote system requires the signing certificate to be in its key database or z/OS PKCS #11 token for validation purposes. The certificate does not need to contain the private key information. These certificates are normally certificate authority (CA) certificates but might also be a self-signed certificate.
• The server or client certificate is being used by another application in a separate key database file or z/OS PKCS #11 token.