Re: Populate with CAs

[Brad Stone <bvstone@xxxxxxxxx>]

I only import CAs needed by client applications or for certificates I use
on my websites or other servers that use SSL.

But deleting expired CAs and certs is important.  Sometimes the IBM i goes
wonky when one is expired and stops everything, even if the CA has nothing
to do with the SSL communications you're doing.

On Fri, Nov 21, 2025 at 9:04 AM Rob Berendt <robertowenberendt@xxxxxxxxx>
wrote:

> So is it generally accepted practice to go into DCM (Digital Certificate
> Manager) at  https://youribmi.yourdomain.com:2007/dcm/mainframe/system
> after applying PTFs, select the "Populate with CAs", Select All, Populate
> and pull in the new ones?
>
> I did this awhile back, when I was having issues with some of the SQL
> services and the remote work they do.  Today I went in, deleted the expired
> ones, repopulated.  Pulled in about 15 since the last time and none of them
> are expired.
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.