CICS Transaction Gateway V5 The WebSphere ... - IBM Redbooks

8.2.1 Configuring the server certificate
We configured a server key database for use with System SSL and a server
keystore file for use with JSSE. System SSL used a test certificate from a
certificate authority, whereas JSSE used a self-signed certificate.
System SSL
For System SSL it was necessary to create a server key database, request an
externally signed test certificate, and receive this certificate into our key
database.
Creating a key database on z/OS
We performed the following steps to create our key database on z/OS:
1. In a z/OS UNIX System Services shell we changed directory to the HFS
directory /web/scsctg5 that we were using for our CICS TG for z/OS
installation, and entered the gskkyman command to invoke the IBM Key
Management Utility.
2. From this menu, we selected Option 1 (Create new key database), as
shown in Example 8-1.
Example 8-1 Creating a new key database
IBM Key Management Utility
Choose one of the following options to proceed.
1 - Create new key database
2 - Open key database
3 - Change database password
0 - Exit program
Enter your option number: 1
3. We continued by replying to the following prompts, as shown in Example 8-2.
Example 8-2 Entering details of the new key database
Enter key database name or press ENTER for "key.kdb": systemssl.kdb
Enter password for the key database.......>
Enter password again for verification.....>
Should the password expire? (1 = yes, 0 = no) [1]: 0
The database has been successfully created, do you want to continue to work
with the database now? (1=yes, 0=no) [1]
Chapter 8. SSL connections to the Gateway daemon on z/OS 191