Re: Error when trying to create a new certificate in the *SYSTEM certificate store

Sorry this took so long to get an answer...This information comes from the
owner of the Digital Certificate management component....

The "Password not stashed for certificate store" message is most likely
referring to the Local Certificate Authority certificate store password.

Select the Local Certificate Authority (CA) store to work with and open it.
You will need to know the password for the Local Certificate Authority
store to open it.  If you don't know it, you will have to call service to
for help or else delete and re-create everything.

Then use the "Change password" function under the Manage Local CA group of
functions in the left navigation panel to change the password for the Local
Certificate Authority store.  Changing the password for the store will
stash the password on the iSeries.

You can then change the password back to the original value if you want.

Then open the *SYSTEM store again and create the certificate.

Patrick Botz
Senior Technical Staff Member
Rochester CTC, eServer Security Architecture & Consulting
iSeries Security Architect
(507) 253-0917, T/L 553-0917
CTC Fax # 507-253-2070
email: botz@xxxxxxxxxx

For more information on CTC, visit our website at
http://www.ibm.com/eserver/services
http://www.ibm.com/servers/eserver/services


midrange-l-bounces@xxxxxxxxxxxx wrote on 10/04/2005 03:31:41 PM:

> We are trying to get started with SSL and this is what i have done so
> far, I created the *SYSTEM certificate store. I have assigned it a
> password. I can now get into the certificate store, but i get a
> message Certificate not created because of an error message "Password
> not stashed for certificate store"
>
> Looking up the manual, i came across the following and have ensured
> that the value is set to 1 to allow me to create the new digital
> certificate.
>
> "Check the value assigned to the Allow new digital certificates
> attribute under the Work with system security option of the System
> Service Tools (SST)."
>
> Do i need to turn on something else. When i go the admin page, i see
> the following  under the 4758 cryptographic processor
>
> "You must run the 4758 Cryptographic Coprocessor configuration
> function using secure sockets layer (SSL) encryption.
>
> Currently SSL encryption is: OFF "
>
>
> --
> Krish Thirumalai