Exporting Certificates from RACF

You can create and export certificates from RACF using the RACDCERT GENCERT and RACDCERT EXPORT commands respectively. You need to modify the parameters depending on your requirements. The following example assumes you are using your own Certificate Authority (CA).

The command to generate a certificate in RACF:

RACDCERT GENCERT ID(SITE) SUBJECTSDN(CN('CommonName') +
      OU('organizational-unit-name1')
      OU('organizational-unit-name2') O('organization-name')) +
      SIZE(1024) NOTAFTER(DATE(yyyy-mm-dd)) +
      WITHLABEL('withlabel-name') +
      SIGNWITH(CERTAUTH LABEL('label-name')) +
      KEYUSAGE(DATAENCRYPT DOCSIGN HANDSHAKE)

The command to export the certificate from RACF:

RACDCERT EXPORT(LABEL('withlabel-name')) ID(SITE) +
         DSN('output-data-set-name') +
         FORMAT(PKCS12B64) PASSWORD('pass phrase')