Document toolboxDocument toolbox

Nexus Documentation
CURL vulnerability information (CVE-2023-38545) - Nexus awareness advisory on Microsoft's update KB5014754

Revoke certificate in Certificate Manager

Owned by Karolin Hemmingsson (Unlicensed)
Last updated: Nov 13, 2023 by Josefin Klang (Deactivated)
2 min read

This article describes how to revoke a certificate that is produced by Smart ID Certificate Manager (CM). The certificate can be a public key certificate (PKC) or an attribute certificate (AC). This task is done in the Certificate Controller (CC) in Certificate Manager (CC).

The article explains the handling of PKCs but it applies to ACs as well, with the only difference that the role 'Revoke attribute certificate' corresponds to the role 'Revoke certificate' and the role 'Revoke attribute certificate with password' corresponds to the role 'Revoke certificate with password'.

Use revocation roles to obtain different levels of security when performing revocation tasks. This table shows the security levels:

Security level

Roles

Type of revocation

Security level

Roles

Type of revocation

High

Revoke certificate with password

Password required

Medium

Revoke certificate with password and
Revoke certificate

Manual verification or password required

Low

Revoke certificate

Unconditional

Although putting a certificate on hold is similar to a revocation it is described separately in Put certificate on hold in Certificate Manager.

This task requires that:

  • The Certificate Controller (CC) is running.

  • The officer has the following role:

    • Revoke certificate OR

    • Revoke certificate with password

  • Enough information is known to identify the certificate in the database.

  • A search for the certificate(s) have been made as described in Search for certificates in Certificate Manager and the user certificate(s) to be revoked are all present in the result pane.

  1. In the CC application window, open the Action drop down list and select a reason.

  2. Select one or more certificates in the upper half of the result pane. (Press the Ctrl key on the keyboard to make multiple selections.) If you want to revoke several certificates in the same request, they will all be given the same reason code.

  3. Click Add to move the certificate(s) to the lower half of the result pane.

  4. Click Submit.

  5. If you have the role 'Revoke certificate with password', the dialog box Enter Revocation Password will appear. Enter the password and click OK.

  6. If you have the roles 'Revoke certificate' and 'Revoke certificate with password', the dialog box Verify Revocation will appear.

    1. You can revoke the certificate with password or without the password, provided that the certificate owner can present other data, only known by that certificate owner, and that these data can be verified by you (the officer).

    2. Check Verification made and click OK.

  7. Enter your PIN code in Signature PIN.

  8. Click OK.

Related information

Copyright 2024 Technology Nexus Secured Business Solutions AB. All rights reserved.
Contact Nexus | https://www.nexusgroup.com | Disclaimer | Terms & Conditions