ibm-information-center/dist/eclipse/plugins/i5OS.ic.cl_5.4.0.1/cvtusrcert.htm

149 lines
5.2 KiB
HTML
Raw Permalink Normal View History

2024-04-02 14:02:31 +00:00
<!doctype html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head><META http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>Convert User Certificate (CVTUSRCERT)</title>
<link rel="stylesheet" type="text/css" href="../rzahg/ic.css">
</head>
<body bgcolor="white">
<script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<a name="CVTUSRCERT.Top_Of_Page"></a>
<h2>Convert User Certificate (CVTUSRCERT)</h2>
<table width="100%">
<tr>
<td valign="top" align="left"><b>Where allowed to run: </b>All environments (*ALL)<br>
<b>Threadsafe: </b>No
</td>
<td valign="top" align="right">
<a href="#CVTUSRCERT.PARAMETERS.TABLE">Parameters</a><br>
<a href="#CVTUSRCERT.COMMAND.EXAMPLES">Examples</a><br>
<a href="#CVTUSRCERT.ERROR.MESSAGES">Error messages</a></td>
</tr>
</table>
<div> <a name="CVTUSRCERT"></a>
<p>The Convert User Certificate (CVTUSRCERT) command allows converting of user certificates from being stored and mapped locally on the system to using Enterprise Identity Mapping (EIM) for mapping and Lightweight Directory Access Protocol (LDAP) for storage.
</p>
<p><b>Restrictions:</b>
</p>
<ul>
<li>You must have all object (*ALLOBJ) and security administrator (*SECADM) special authorities.
</li>
<li>Prior to running this command, the digital ID configuration must have been set using the Set Digital ID Configuration Information (QsySetDigitalIDConfig) API or Digital Certificate Manager (DCM).
</li>
<li>You must have configured this system to participate in an EIM domain.
</li>
<li>You must have set the system connection information using the Set EIM Connect Information (QsySetEIMConnectInfo) API or the EIM configuration GUI.
</li>
<li>For the user profile specified on the command, there must be a target association to an EIM identifier for the local registry that was specified when the system was configured to participate in an EIM domain.
</li>
</ul>
</div>
<table width="100%">
<tr><td align="right"><a href="#CVTUSRCERT.Top_Of_Page">Top</a></td></tr>
</table>
<hr size="2" width="100%">
<div>
<h3><a name="CVTUSRCERT.PARAMETERS.TABLE">Parameters</a></h3>
<table border="1" cellpadding="4" cellspacing="0">
<!-- col1="10" col2="15" col3="30" col4="10" -->
<tr>
<th bgcolor="aqua" valign="bottom" align="left">Keyword</th>
<th bgcolor="aqua" valign="bottom" align="left">Description</th>
<th bgcolor="aqua" valign="bottom" align="left">Choices</th>
<th bgcolor="aqua" valign="bottom" align="left">Notes</th>
</tr>
<tr>
<td valign="top"><a href="#CVTUSRCERT.USRPRF"><b>USRPRF</b></a></td>
<td valign="top">User profile</td>
<td valign="top"><i>Simple name</i></td>
<td valign="top">Required, Positional 1</td>
</tr>
<tr>
<td valign="top"><a href="#CVTUSRCERT.OPTION"><b>OPTION</b></a></td>
<td valign="top">Option</td>
<td valign="top"><b><u>*CVTRMV</u></b>, *RMV, *CVT</td>
<td valign="top">Optional, Positional 2</td>
</tr>
</table>
<table width="100%">
<tr><td align="right"><a href="#CVTUSRCERT.Top_Of_Page">Top</a></td></tr>
</table>
</div>
<div> <a name="CVTUSRCERT.USRPRF"></a>
<h3>User profile (USRPRF)</h3>
<p>Specifies the user profile whose certificates are to be converted.
</p>
<p>This is a required parameter.
</p>
<dl>
<dt><b><i>simple-name</i></b></dt>
<dd>Specify the user profile name.
</dd>
</dl>
</div>
<table width="100%">
<tr><td align="right"><a href="#CVTUSRCERT.Top_Of_Page">Top</a></td></tr>
</table>
<div> <a name="CVTUSRCERT.OPTION"></a>
<h3>Option (OPTION)</h3>
<p>Specifies the option to be performed on the user certificate.
</p>
<dl>
<dt><b><u>*CVTRMV</u></b></dt>
<dd>Convert the mapping information to use EIM and move the certificates themselves into LDAP. The existing certificates and mapping information will be removed from the user profile.
</dd>
<dt><b>*RMV</b></dt>
<dd>Remove the mapping information and certificates from the user profile.
</dd>
<dt><b>*CVT</b></dt>
<dd>Copy the mapping information to EIM and certificates into LDAP. The existing certificates and mapping information will remain in the user profile.
</dd>
</dl>
</div>
<table width="100%">
<tr><td align="right"><a href="#CVTUSRCERT.Top_Of_Page">Top</a></td></tr>
</table>
<hr size="2" width="100%">
<div><h3><a name="CVTUSRCERT.COMMAND.EXAMPLES">Examples</a> </h3>
<p>
<pre>
CVTUSRCERT USRPRF(JOHNSON) OPTION(*CVTRMV)
</pre>
</p>
<p>This command converts all digital certificates for user profile JOHNSON to use EIM for mapping information and LDAP for storing the certificates. The certificates and mapping information currently stored with the user profile will be removed.
</p>
</div>
<table width="100%">
<tr><td align="right"><a href="#CVTUSRCERT.Top_Of_Page">Top</a></td></tr>
</table>
<hr size="2" width="100%">
<div><h3><a name="CVTUSRCERT.ERROR.MESSAGES">Error messages</a> </h3>
<p><b><u>*ESCAPE Messages</u></b>
</p>
<dl>
<dt><b>CPF2204</b></dt>
<dd>User profile &amp;1 not found.
</dd>
<dt><b>CPF2213</b></dt>
<dd>Not able to allocate user profile &amp;1.
</dd>
<dt><b>CPF2225</b></dt>
<dd>Not able to allocate internal system object.
</dd>
<dt><b>CPF222E</b></dt>
<dd>&amp;1 special authority is required.
</dd>
<dt><b>CPF4AB9</b></dt>
<dd>User certificate function not successful.
</dd>
</dl>
</div>
<table width="100%">
<tr><td align="right"><a href="#CVTUSRCERT.Top_Of_Page">Top</a></td></tr>
</table>
</body>
</html>