CICS MC 3667

Updated: Jul 23, 2021

July 22, 2021


TO : All Clearing Banks/Institutions


RE : PKI CERTIFICATES RENEWAL – ICL FILE ENCRYPTION & SIGNING IN CICS


1. Please be informed that most of the issued PKI certificates used for signing and encryption

of the Image Cash Letter (ICL) files in the Check Image Clearing System (CICS) before

transmission are nearing its respective expiration periods. Note that there are three (3)

certificates maintained in the system, namely:


1.1. PCHC Certificate (Public Key of Clearing House Encryption Certificate)

1.2. Bank Certificate for Signing

1.3. Bank Certificate for Encryption


2. We highly enjoin all participant banks to check the expiration dates of the installed

Encryption and Signing certificates (Items 1.2. and 1.3) in all their PBM Servers and

generate new ones if necessary. The renewal process can be accomplished at any time

following the procedures for the generation of new keys that will be made available for

download and will supersede Section 8.11 – Certificate Enrolment of the PBM Installation

Guide.


3. Meanwhile, the existing PCHC Certificate that was generated and installed in the

respective PBM severs of the banks is scheduled to expire on August 26, 2021.


4. As such, PCHC shall generate a new PCHC Certificate with a five (5)-year validity period to

replace the existing one and shall be distributed to all the banks. The new certificate shall

be made available for download together with other documents for the installation,

generation of new keys and a video reference on Monday, July 26, 2021. This will be

communicated directly to the respective email addresses of the authorized Banks’ Liaison

Officers.


5. The installation of the new PCHC Certificate must be done by PCHC and the banks ALL

AT THE SAME TIME in order for the CICS backend and all the PBM servers of the banks to

be synchronized.


6. Therefore, the installation and deployment of the new PCHC certificate at the CICS

backend server shall be implemented on August 14, 2021 (Saturday) starting at

7:00AM. As mentioned, banks MUST install the new PCHC certificate provided in all their

respective PBM server stations after this time to match the certificate installed at the CICS

Backend server.


7. Banks that are using the web-based CICS Frontend System of PCHC and do not have the

PBM server are NOT affected by the certificate expirations.


8. Should you need more information and/or clarifications, do not hesitate to contact any of

the PCHC officers below, to wit:

Name Landline Mobile Email


Ruben Conseja 85372711 09178387010 rubenconseja@pchc.com.ph

Renie Sugano 85372722 09178387098 reniesugano@pchc.com.ph

Maxi Torrecampo 85372710 09178387096 maxi.torrecampo@pchc.com.ph

Ley Julian 85372713 09178387050 leyjulian@pchc.com.ph


9. Please be guided accordingly.


MC.3667.PKI CERTIFICATES RENEWAL – ICL FILE ENCRYPTION & SIGNING IN CICS
.pdf
Download PDF • 90KB