Delete a personal certificate from a key repository

Delete a personal certificate from a key repository

Use the following procedure to remove personal certificates:

Start the iKeyman GUI using either the gsk7ikm command (on UNIX) or the strmqikm command (on Windows).
From the Key Database File menu, click Open. The Open window displays.
Click Key database type and select CMS (Certificate Management System).
Click Browse to navigate to the directory that contains the key database files.
Select the key database file to which you want to add the certificate, for example key.kdb.
Click Open. The Password Prompt window is displayed.
Type the password you set when you created the key database and click OK. The name of your key database file displays in the File Name field.
In the Personal Certificates list, select the certificate you want to delete.
If you do not already have a copy of the certificate and you want to save it, click Export/Import and export it (see Exporting a personal certificate from a key repository).
With the certificate selected, click Delete. The Confirm window displays.

Click Yes. The Personal Certificates field no longer shows the label of the certificate you deleted.

Use the following commands to delete a personal certificate using IKEYCMD or GSKCapiCmd:
On UNIX:
gsk7cmd -cert -delete -db filename -pw password -label label
On Windows:
runmqckm -cert -delete -db filename -pw password -label label
Using GSKCapiCmd:
gsk7capicmd -cert -delete -db filename -pw password -label label -fips
where:

-db filename is the fully qualified file name of a CMS key database.
-pw password is the password for the CMS key database.
-label label is the label attached to the personal certificate.
-fips specifies that the command is run in FIPS mode. This mode disables the use of the BSafe cryptographic library. Only the ICC component is used and this component must be successfully initialized in FIPS mode. When in FIPS mode, the ICC component uses algorithms that have been FIPS 140-2 validated. If the ICC component does not initialize in FIPS mode, the gsk7capicmd command fails.

Parent topic:
Managing digital certificates

sy12370_

-db filename	is the fully qualified file name of a CMS key database.
-pw password	is the password for the CMS key database.
-label label	is the label attached to the personal certificate.
-fips	specifies that the command is run in FIPS mode. This mode disables the use of the BSafe cryptographic library. Only the ICC component is used and this component must be successfully initialized in FIPS mode. When in FIPS mode, the ICC component uses algorithms that have been FIPS 140-2 validated. If the ICC component does not initialize in FIPS mode, the gsk7capicmd command fails.