Table of Contents
Advertisement
The certificate is shown in base-64 encoded form at the bottom of the Certificate
page, under the heading "Installing this certificate in a server." In addition to its
use with servers, this encoded form of the certificate can be used by CMS
administrators and Data Recovery Manager agents for setting up new agents and
recovering private encryption keys, respectively. (For more information on key
recovery, see "Finding and Recovering Keys" on page 73 in Chapter 6.)
Revoking Certificates
Only Certificate Manager agents can revoke certificates other than their own. You
need to revoke a certificate if one of the following situations occurs:
•
The owner of the certificate has changed status and no longer has the right to
use the certificate.
•
The private key of a certificate owner has been compromised.
To revoke one or more certificates, you must search for the certificates you want to
revoke using the Revoke Certificates button. While the search is similar to the one
invoked by Search for Certificates, the Search Results form returned by this search
gives you the option of revoking one or all of the found certificates.
Searching for Certificates to Revoke
To search for one or more certificates to revoke:
Go to the Certificate Manager Agent Services page (see "Accessing Agent
1.
Services" on page 25).
You must submit the proper client certificate to get access to this page.
Click Revoke Certificates.
2.
The search form that appears has the same search criteria sections as the Search
for Certificates form.
Specify the search criteria by selecting the check boxes for the sections you
3.
want to use, then filling in the required information.
For details on search criteria, see "Advanced Certificate Search" on page 55.
Scroll to the bottom of the form and select a number of matching certificates to
4.
display.
Chapter 4
Finding and Revoking Certificates
Revoking Certificates
61
Advertisement
Table of Contents
