With the desired certificate in RACF and properly labeled, it is next bound to the PKCS#11 Token. Do not change the label and token name. An example job that performs this step can be found in member STEP3 within the PROCLIB library. Following is a similar example code:
//*
//* The JOBCARD must be in place before JOB is submitted
//*
//* -------------------------------------------------------
//* Bind certificate to PKCS#11 Token
//* -------------------------------------------------------
//*
//STEP01 EXEC PGM=IKJEFT01,DYNAMNBR=20
//SYSTSPRT DD SYSOUT=*
//SYSTSIN DD *
RACDCERT BIND(ID(GRB) LABEL('TdgssUserAuth') +
TOKEN(TERADATA.TTU.PKCS11.TOKEN) DEFAULT)
//
Change GRB to a Userid in previous step ID. Do not change LABEL.