Problem

How to change SSL from CFT PKI to SYSTEM PKI (RACF)

Existing CFT instance (CFT 2.7.1 SP9 P1)

Resolution

Update A03PARM with:

000145 xpkiopt 'YES'
000146 csflib 'SYS1.CSF.SCSFMOD0' Mandatory if XPKIOPT = YES

Update CFTENV with:
000031 // SET CSFLIB=SYS1.CSF.SCSFMOD0
000032 // SET XPKIOPT=YES

Execute job A12OPTS
Execute job B20LINK

Re-applied the SP9
Execute job A13PTFLD
Execute job A13PTFLK
Execute job A13UPTFA
Execute job A13UCONF

Re-apply SP9 patch1
Execute job A13PTFLD
Execute job A13PTFLK

Start CFT - COPILOT

Note1: error below in a CFT log stand for XPKIOPT not set or the CSFLIB not found

ERROR in EXIPKDM CSNDPKD(78): Configuration error, pki.type=system dummy function used, XPKIOPT must be set to YES.

Note2: for other CFT versions or SP/Patch level, the procedure remains the same:

Update A03PARM and CFTENV as above

Execute jobs A12OPTS and B20LINK

Then apply again SP and Patch when needed