Skip to main content
Skip table of contents

Modify CA key in Certificate Manager

This article includes updates for CM 8.10. 

This article describes how to modify a Certificate Authority (CA) key, used within Smart ID Certificate Manager (CM). The name of the key may be modified. If the key is not connected to any authority then the authority type may also be modified. How to remove a CA key is also described. These tasks are done in Administrator's workbench (AWB).


The following prerequisites apply:

  • Two administration officers must sign the request.

  • Both officers must have the following roles:

    • Use AWB

    • CA and Key tasks

  • A connection to the CM host must have been established. See Connect to a Certificate Manager host.

  • The following information is required by the administration officer during the task:

    • The key name that will appear in the Key Registry in the explorer bar

Modify CA key

  1. In AWB, select the CA/SA key to be modified by highlighting it.

  2. Select the Modify command from the Edit menu, toolbar or shortcut menu.

  3. In the Modify dialog you can:

    1. Change the name that appears in the explorer bar of the AWB window

    2. Change State to Active or Closed as required

    3. Change Domain and Visible in subdomain.

    4. Change Authority type if the authority object is not yet already in use by an authority.

  4. When the required changes are complete, click OK and sign the request. See Sign tasks in Certificate Manager for more information.

Remove CA key

  1. In AWB, select the CA/SA key to be deleted by highlighting it.

  2. Select Tools > Remove key. The Signature dialog box appears. See Sign tasks in Certificate Manager for more information.

Only Not In Use or Retired keys can be removed. For a Retired key the CA/SA must be revoked.

Additional information

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.