Exporting the IBM DS8000 certificate chain
You might have to export the DS8000 security certificates so that they are available for import to z/OS and IBM Resource Access Control Facility (RACF) when you set up secure communication between Data Facility Storage Management Subsystem (DFSMS) and the DS8000 Hardware Management Console (HMC) acting as a cloud proxy.
This appendix explains how to export the DS8000 security certificate chain by using two different web browsers. Other methods exist and can be used.
This appendix includes the following topics:
Certificate export with Google Chrome or Microsoft Edge
If you use Microsoft Edge as your web browser, you can export the required certificates by completing the following steps.
 
Note: The process to export certificates to files by using the Google Chrome web browser is like the steps that are described here.
1. Open the browser and connect to the DS8000 HMC from which you want to export the certificates.
2. When you see the login window of the DS8000, click the lock icon to the left of the URL field.
 
Note: In our example, we use self-signed certificates in the DS8000 HMC and the window displays a warning saying “Insecure” instead of the lock icon. Click this warning to continue as described and as shown in Figure B-1. The procedure to export the certificates is the same.
Figure B-1 DS8000 login window by using Microsoft Edge
3. In the website information window, click the security information section, as shown in Figure B-2.
Figure B-2 Microsoft Edge website information window
4. In the Security information window, click the Show Certificate icon, as shown in Figure B-3.
Figure B-3 Security information window in Microsoft Edge
5. In the Certificate Viewer window, select the Details tab to see the certificate details, as shown in Figure B-4.
Figure B-4 Certificate details in the Certificate Viewer window in Microsoft Edge
6. Select the certificate that you want to export and click Export selected certificate to save the certificate to a file.
7. Repeat step 6 for all certificates that you need.
Certificate export with Firefox
If you use the Firefox web browser, you can export the required certificates by completing the following steps:
1. Open the Firefox browser and connect to the DS8000 HMC from which you want to export the certificates.
2. When the browser connects and you see the login window of the DS8000, click the lock icon to the left of the URL field, as shown in Figure B-5.
Figure B-5 DS8000 login window by using Firefox
3. In the website information window, click the security information section, as shown in Figure B-6.
Figure B-6 Firefox website information window
4. In the Security information window, click More information, as shown in Figure B-7 on page 143.
Figure B-7 Firefox security information window
5. The window that opens shows the security details for the website. Click View Certificates, as shown in Figure B-8.
Figure B-8 Firefox website security details
6. Firefox now shows the certification viewer for this website. There is information for each certificate that the website is using in separate tabs. Click the tab for the certificate that you want to export, as shown in Figure B-9.
Figure B-9 Firefox certificate viewer
7. Scroll down until you see the Miscellaneous section. It contains a link to export the selected certificate. Because the exported files are in Privacy-Enhanced Mail (PEM) format, you must place each certificate into a separate file. Therefore, use the PEM(cert) link, as shown in Figure B-10, and not the one for the entire CA chain, even though it might be available.
Figure B-10 Exporting a certificate in Firefox
8. Repeat step 7 for all certificates that you need.
 
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset