6.4 Scheduled certificate revocation operations

MyID provides the ability to execute scheduled certificate request and revocation operations. This is typically used to perform regular maintenance tasks, such as automatically revoking certificates that have been suspended for a preconfigured length of time.

The detection and flagging of certificates to be revoked is typically performed by a stored procedure. The submission of these requests to the Certification Authority relies on processes carried out automatically by the MyID certificate service (eCertificate Server), which is set up during installation.

To set MyID to revoke suspended certificates after a given time period:

  1. From the Configuration category, select the Operation Settings workflow.

  2. Click the Certificates tab.

  3. Set a value for the Suspend to revoke period option.

Update the value to the number of days a certificate must be suspended before it is revoked. By default, this entry has a value of zero, which means that suspended certificates will not be automatically revoked.