Revoking a CA certificate in SSL

If a certificate authority (CA) certificate is compromised and the servers cannot trust it anymore that CA certificate can be revoked. To revoke a CA certificate, you perform the following task. You use the admin console to replace or revoke a CA certificate.

 

1. Click Security > SSL certificate and key management.

2. Under Related Items, click Key stores and certificates.

3. Click a <keystore name> to which you want to add the new CA certificate.

4. Under Additional Properties, click Personal certificates to list the personal certificates.

5. Select a certificate to revoke (a CA certificate)

6. Click the Revoke button.

7. Fill in the following information to the CA certificate section.

   • Revocation password

   • Revocation reason

8. Click Apply then OK.

 

Results

The certificate is revoked in the key store selected in the path. If the certificate selected was not a CA certificate, then an error is returned.

 

Next steps

 

Related tasks

Create an SSL configuration

 

Related

PersonalCertificateCommands