Ensure that the user is supplying the correct certificate. If the user is supplying the correct certificate, and it should be associated with a RACF user ID, use the RACDCERT command to ADD the certificate for the user, or associate it with a user ID with the MAP function. If a certificate mapping exists for the certificate and it has additional criteria specified, check for an entry in SYS1.LOGREC to determine if an error was encountered attempting to locate the corresponding DIGTCRIT profile.