The Revoke Certificate page is for administrators to view and revoke user's certificates

1. Create a New Realm for the Revoke Certificate page

2. Configure the following tabs in the Web Admin before configuring the Post Authentication tab:

  • Overview – the description of the realm and SMTP connections must be defined
  • Data – an enterprise directory must be integrated with SecureAuth IdP
  • Workflow – the way in which users will access this application must be defined
  • Registration Methods – the 2-Factor Authentication methods that will be used to access this page (if any) must be defined


1. Restrict the realm to only admins in the Membership Connection Settings section by selecting Allow Access from the User Group Check Type dropdown, provide the User Groups name(s) (e.g. "admins"), and the Groups Field in the enterprise directory that contains group information of each user

Click Save once the configurations have been completed and before leaving the Data page to avoid losing changes


2. Select Revoke Certificate from the Authenticated User Redirect dropdown in the Post Authentication tab in the Web Admin

3. An unalterable URL will be auto-populated in the Redirect To field, which will append to the domain name and realm number in the address bar (Authorized/RevokeCert.aspx)

4. A customized post authentication page can be uploaded, but it is not required

Click Save once the configurations have been completed and before leaving the Post Authentication page to avoid losing changes


5. Click View and Configure FormsAuth keys / SSO token to configure the token/cookie settings and to configure this realm for Single Sign-on (SSO)

These are optional configurations

In realms utilizing SecureAuth's ActiveX plugin to validate certificates, or in realms validating Java certificates, IIS caches the CRL and does not automatically grab the latest CRL for revocation. To force IIS to check for the updated CRL, run this command as administrator:

certutil -setreg chain\ChainCacheResyncFiletime @now