QUESTION POSED ON: 16 July 2007 Our certification authority has three certificates instead of one and is using them to issue a new certificate for Internet Information Services (IIS). How can I get rid of the two extra certificates and improve IIS security?
>
EXPERT RESPONSE
You can't really delete security certificates on the CA as much as you can revoke them. Open the Certification Authority MMC snap-in (either on the CA or on a computer that has the CA MMC snap-in installed). In the "Issued Certificates" folder, locate the certificates that are invalid. Right click on each of them individually and select All Tasks > Revoke Certificate from the menu. When prompted, enter the appropriate reason for revoking the certificate and click "Yes." The certificate will be moved from the Issued Certificates to the Revoked Certificates section.
Search and Browse the Expert Answer Center Search and browse more than 25,000 question and
answer pairs from more than 250 TechTarget industry experts.
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.