This article describes how to modify a Certificate Authority (CA) key, used within Smart ID Certificate Manager (CM). Also described is how to remove a CA key. These tasks are done in Administrator's workbench (AWB).

Prerequisites

The following prerequisites apply:

Two administration officers must sign the request.
Both officers must have the following roles:
- Use AWB
- CA and Key tasks
A connection to the CM host must have been established. See Connect to a Certificate Manager host.
The following information is required by the administration officer during the task:
- The key name that will appear in the Key Registry in the explorer bar

Step-by-step instruction

In AWB, select the CA key to be modified by highlighting it.
Select the Modify command from the Edit menu, toolbar or shortcut menu.
In the Modify dialog you can:
1. change the name that appears in the explorer bar of the AWB window
2. change State to Active or Closed as required
3. change Domain and Visible in subdomain.
When the required changes are complete, click OK and sign the request. See Sign tasks in Certificate Manager for more information.

In AWB, select the CA key to be deleted by highlighting it.
Select Tools > Remove key. The Signature dialog box appears. See Sign tasks in Certificate Manager for more information.

Only Not In Use or Retired keys can be removed. For a Retired key the CA must be revoked.