We are here in CA2.
This is our subordinate enterprise CA.
I'm going to come here to the cr console that we built,
and after it loads,
we can come here to where it says Certification Authority, go to
carvedrockIssueCA, and these are our Issued Certificates.
We can come to one of these certificates,
examine it, and if we want to revoke it, we
right‑click, All Tasks, Revoke Certificate.
Now, this is important, if we do not specify a
reason other than Certificate Hold, we cannot unrevoke this certificate.
So what we're going to do is we're going to have Certificate Hold here,
and then click on Yes. And it disappears from here, it's not an issued
certificate, it's a revoked certificate.
So this revoked certificate is right here, and I can right‑click it, All
Tasks, and Unrevoke Certificate. Notice here, now here I revoked this
certificate earlier and it is for an unspecified reason.
I can right‑click this, I can go to All Tasks, Unrevoke Certificate,
and then we get an error message saying the unrevoke certificate
command failed. Certificates can only be unrevoked if they are revoked
with the reason 'Certificate Hold'.
So, any other reason, that revoked certificate stays revoked, so remember that.
I'm going to click on OK, we're going to go to Issued Certificates, right‑click,
say Refresh, and our certificate is back in here.
So revoking certificates, there's several reasons, and you saw some
of those reasons in the drop‑down list. If there's any circumstance
where you feel there's a breach on your network, a breach of the
certification authority, a breach of a user,
let's say, you can revoke their certificate,
and that takes away quite a few rights that they would
ordinarily have with that certificate.
So that is how you revoke a certificate and unrevoke a
certificate in Windows Server 2022.
Up next,
we'll take a look at enrollment agents and how to configure those so somebody else can enroll the users on your network.