Managing certificates by expiration

 

Digital Certificate Manager (DCM) provides certificate expiration management support to allow administrators to manage server or client certificates, object signing certificates, and user certificates by expiration date on the local system.

If you configure DCM to work with Enterprise Identity Mapping (EIM), you can manage user certificates by expiration date across the enterprise. Using DCM to view certificates based on their expiration date allows you to determine quickly and easily which certificates are close to expiring so that certificates can be renewed in a timely fashion.

Because you can use a signature verification certificate to verify object signatures even when the certificate is expired, DCM does not provide support for checking the expiration of these certificates.

To view and manage server and client certificates or object signing certificates based on their expiration dates, follow these steps:

  1. Start DCM. Refer to Starting DCM.

  2. In the navigation frame, click Select a Certificate Store and select either *OBJECTSIGNING or *SYSTEM as the certificate store to open.

    If you have questions about how to complete a specific form while using DCM, select the question mark (?) at the top of the page to access the online help.

  3. Enter the password for the certificate store and click Continue.

  4. After the navigation frame refreshes, select Manage Certificates to display a list of tasks.

  5. From the list of tasks, select Check expiration.

  6. Select the type of certificate that you want to check. If you are in the *SYSTEM certificate store, select Server or client; if you are in the *OBJECTSIGNING certificate store, select Object signing.

  7. In the Expiration date range in days (1-365) field, enter the number of days for which to view certificates based on their expiration date and click Continue. DCM displays all certificates that expire between today's date and the date that corresponds to the number of days that you specify. DCM also displays all certificates that have expiration dates before today's date.

  8. Select a certificate that you want to manage. You can choose to view certificate information details, delete the certificate, or renew the certificate.

  9. When you finish working with certificates from the list, click Cancel to exit.

 

Parent topic:

Managing DCM
Related tasks
Managing user certificates by expiration