Remove User Certificate (QSYRMVUC, QsyRemoveUserCertificate) API

  Required Parameter Group for QSYRMVUC:

1	User profile	Input	Char(*)
2	Certificate	Input	Char(*)
3	Type	Input	Binary(4)
4	Length of certificate	Input	Binary(4)
5	Error code	I/O	Char(*)

  Default Public Authority: *USE

  Threadsafe: Yes

  Syntax for QsyRemoveUserCertificate:

 #include <qsydigid.h>

 void QsyRemoveUserCertificate(
                    void    *User_profile,
                    char    *Certificate,
                    int      Type,
                    int      Length_of_certificate,
                    void    *Error_code);

  Service Program: QSYDIGID

  Default Public Authority: *USE

  Threadsafe: Yes

The Remove User Certificate (OPM, QSYRMVUC; ILE, QsyRemoveUserCertificate) API removes a certificate from an i5/OS user profile.

Authorities and Locks

User Profile Authority

If the user profile specified is not the current user for the job, the caller of this API must have *SECADM special authority and *USE and *OBJMGT authorities to the specified user profile.

If an EIM identifier is specified for the user profile name, the caller of this API must have *SECADM and *ALLOBJ special authority

Required Parameter Group

User profile

INPUT; CHAR(*)

The name of the user profile or the Enterprise Identity Mapping (EIM) identifier that holds the certificate. The following are valid selections:

*CURRENT	The user profile that is currently running. The value must be 10 characters, blank padded.
user profile	The name of the user profile. The value must be 10 characters, blank padded.
EIM identifier	To specify an EIM identifier for this parameter, the data must have the following format: char(8) The special value *EIMID. binary(4) The hex length of the EIM identifier. char(*) The EIM identifier.

Certificate

INPUT; CHAR(*)

The certificate or handle of the certificate that identifies the entire certificate that is to be removed. This is not a text string.

Type

INPUT; BINARY(4)

The type that identifies the contents in the certificate field.

The possible types are:

1	Entire X.509 public key certificate in Abstract Syntax Notation 1 Distinguished Encoding Rules (ASN.1 DER) encoding.
2	Certificate handle for X.509 certificate.
3	Base 64 encoded version of the entire X.509 public key certificate in ASN.1 DER encoding. Note that the characters of the Base 64 encoding are the ASCII representation and not the EBCDIC representation.

Length of certificate

INPUT; BINARY(4)

The length of the certificate or handle of the certificate that was specified.

Error code

I/O; CHAR(*)

The structure in which to return error information. For the format of the structure, see Error Code Parameter.

Error Messages