If you wish to generate your own certificate for Identity Token Support, you will find an example job in the PROCLIB library within member STEP2. The following code similarly generates a self-signed certificate.
//*
//* The JOBCARD must be in place before JOB is submitted
//*
//* -------------------------------------------------------
//* Generates a self-signed request for user GRB
//* -------------------------------------------------------
//*
//STEP01 EXEC PGM=IKJEFT01,DYNAMNBR=20
//SYSTSPRT DD SYSOUT=*
//SYSTSIN DD *
RACDCERT ID(GRB) + <= change to valid Userid
GENCERT +
SUBJECTSDN(CN('TDGSS User') + OU('ttu') +
O('Teradata') + L('El
Segundo') + c('us')) +
RSA +
WITHLABEL('TdgssUserAuth') <= Do not change !!
/*