Export Revocation Request Configuration

Start the certificate revocation process by selecting the certificate that you want to revoke. Provide the required configuration properties. Export this transaction as part of an update set, which is imported into the protected instance for approval and execution.

Before you begin

Role required: sn_cse.codesigning_admin, sn_cse.quorum_requester, security_admin

Procedure

1. On your trusted instance, navigate to All > Code Signing > Configuration > Guided Setup and open the Code Signing configuration page.
2. In the Instance type field, select trusted instance.
3. Select the Next button.
4. In the Action field under Select the action you’d like to accomplish, select Certificate Revocation.
   The Certification Revocation Request page appears.
5. In the Select Certificate to Revoke page, select the certificate that you want to revoke and select Initiate Revocation.
6. Configure the approval requirements for certification revocation.
   1. In the Quorum Requirements menu, enter the appropriate information in the text fields.

      Table 1. Quorum Requirements Properties

      Property	Description
      Minimum approvals	Minimum number of approvers required to approve the certificate revocation request.
      Time window	Expiration time for the revocation request.
      Approvers	Email address of the users who are authorized to approve the revocation request.

   2. In the Request description field, enter the reason for initiating the certificate revocation.
   3. Select Save.
      The Export configuration file menu appears.
   4. On the Export Configuration file page, select Export to create and download a configuration file used to run certificate revocation workflow on your protected instance.

Result

The export process downloads an XML file to your local machine for use in the steps detailed in Configure Code Signing Enterprise on your protected instance.