Manage DCM

Use this information to learn how to use DCM to manage your certificates and the applications that use them. Also, you can learn about how to digitally sign objects and how to create and operate your own Certificate Authority.

After you configure Digital Certificate Manager (DCM), there are a number of certificate management tasks that you will need to perform over time. To learn how to use DCM to manage your digital certificates, review these topics:

• Use a Local CA to issue certificates for other iSeries systems
  Review this information to learn how to use a private Local CA on one system to issue certificates for use on other iSeries™ systems.
• Manage applications in DCM
  This topic provides information about creating application definitions and how to manage an application's certificate assignment. You can learn about defining CA trust lists that applications use as the basis of accepting certificates for client authentication.
• Manage certificates by expiration
  Digital Certificate Manager (DCM) provides certificate expiration management support to allow administrators to manage server or client certificates, object signing certificates, and user certificates by expiration date on the local system.
• Validate certificates and applications
  You can use Digital Certificate Manager (DCM) to validate individual certificates or the applications that use them. The list of things that DCM checks differs slightly depending on whether you are validating a certificate or an application.
• Assign a certificate to applications
  Digital Certificate Manager (DCM) allows you to assign a certificate quickly and easily to multiple applications. You can assign a certificate to multiple applications in the *SYSTEM or *OBJECTSIGNING certificate stores only.
• Manage CRL locations
  Digital Certificate Manager (DCM) allows you to define and manage Certificate Revocation List (CRL) location information for a specific Certificate Authority (CA) to use as part of the certificate validation process.
• Store certificate keys on an IBM Cryptographic Coprocessor
  Review this information to learn how to use an installed coprocessor to provide more secure storage for your certificates' private keys.
• Manage the request location for a PKIX CA
  A Public Key Infrastructure for X.509 (PKIX) Certificate Authority (CA) is a CA that issues certificates based on the newest Internet X.509 standards for implementing a public key infrastructure.
• Manage LDAP location for user certificates
  Review this information to learn how to configure DCM to store user certificates in a Lightweight Directory Access Protocol (LDAP) server directory location to extend Enterprise Identity Mapping to work with user certificates.
• Sign objects
  Use this information to learn how to use DCM to manage certificates that you use to digitally sign objects to ensure their integrity.
• Verify object signatures
  You can use Digital Certificate Manager (DCM) to verify the authenticity of digital signatures on objects. When you verify the signature, you ensure that the data in the object has not been changed since the object owner signed the object.