Deleting A Certificate From The Certificate Database - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Managing the Certificate Database
Deleting a Certificate From the Certificate
Database
By default, the CMS certificate database includes a few public or third-party CA
certificates. As an administrator, you should periodically check the contents of the
certificate database and make sure that it doesn't include any unwanted CA
certificates. For example, if the database includes CA certificates that you don't
ever want to trust in your PKI setup, you should delete them.
Removing unwanted certificates also reduces the size of the certificate database.
NOTE
To delete a CA certificate from the certificate database:
Log in to the CMS window (see "Logging In to the CMS Window" on
1.
page 333).
Select the Configuration tab, and then in the right pane, select the Encryption
2.
tab.
Click Manage Certificate.
3.
The Certificate Database Management window appears. The window lists all
the certificates for the selected instance of Certificate Management System; the
list is a table, with each certificate occupying a row.
Select the CA certificate you want to delete, and click Delete.
4.
When prompted, confirm the delete action.
5.
Click Close.
6.
You are returned to the Encryption tab.
To save your changes, click Save.
7.
The CMS configuration is modified. If the changes you made require you to
restart the server, you will be prompted accordingly. In that case, restart the
server.
484 Netscape Certificate Management System Installation and Setup Guide • May 2002
When deleting CA certificates from the certificate database, be
careful not to delete the intermediate CA certificates, which help a
subsystem chain up to the trusted CA certificate. If in doubt, leave
the certificates in the database as untrusted CA certificates; see
"Changing the Trust Settings of a CA Certificate" on page 485.