Disable
You can disable a root CA or a subordinate CA. No certificates can be issued from a disabled CA. CRLs will still be generated.
To disable CA:
-
Go to
(Menu) icon >
PKI+ > CA Inventory.
The CA Inventory page appears. - Select the check box against the CA Name you want to disable.
- Click Actions and select Disable from the dropdown menu.
The approval status of the CA changes to Disable - Approval Pending and the status remains as Active. If you want to abort the action, then click Abort.
-
An email from AppViewX PKIaaS for approval is sent to all
active custodians.
Approval
can be done either via email or by clicking the
(Notification Center)
on the top right-hand-corner of the page.
Once the approval meets the quorum value, the CA is
disabled. The approval status of the CA changes to
Disable - Approved and the status to
Disabled. If the request is rejected, then
the approval status changes to Disable - Rejected and
the status remains as Active. Click Resubmit
if the action fails for any reason.
You can follow the aforesaid steps to disable CAs.You can view all the disabled CAs by selecting Disabled option from Filter by Status.