How to generate a certificate signing request (CSR), and receive a CA signed certificate and connect it to a z/OS RACF Key ring to use with Sterling Connect:Direct for z/OS.
Links embedded in this video (open in new tab): Slide 21: http://www.redbooks.ibm.com/redbooks/pdfs/sg246968.pdf
This presentation is also available in PDF: ftp://ftp.software.ibm.com/software/iea/content/com.ibm.iea.scd4z/scd4z/5.1/content/scd4z_RACF_KEY_RINGS_Part_2_Generating_a_CSR_and_receiving_a_CA_signed_certificate.pdf