Deleting a CA root digital certificate

If you no longer want to use one of the CAs in your signature digital certificate list, you must delete the CA root digital certificate.

Note: Before deleting a CA root digital certificate, create a backup copy in case you later want to recreate the CA root.

To delete a CA root digital certificate from a database, use the following procedure:

  1. Unless you are already using Key Manager, start the tool by typing:
    # certmgr
  2. From the main screen, select Open from the Key Database File list.
  3. Highlight the key database file from which you want to delete a CA root digital certificate and click Open.
  4. Enter the password and click OK. After your password is accepted, you are returned to the Key Management screen. The title bar shows the name of the key database file you selected, indicating that the file is now open and ready to be edited.
  5. Select Signer Certificates from the Personal/Signer Certificates list.
  6. Highlight the certificate you want to delete and click Delete. The Confirm screen is displayed.
  7. Click Yes. You are returned to the IBM® Key Management screen. The label of the CA root digital certificate no longer appears in the Signer Certificates field. You can either perform other tasks or exit the tool.