Tutorial: Revoke or Delete a User Certificate or Profile⁠

• An installed Access Server.

• VPN users.

• Admin Web UI access or console access.

1. Sign in to the Admin Web UI.

2. Click Certificate Management.

   • The Web Server Certificate tab displays.

3. Click the VPN Client Certificates tab.

4. Click the delete icon for the profile you need to delete or revoke.

   • A confirmation message displays.

5. Click Delete.

   • The profile is deleted.

You can revoke certificates or profiles from your Access Server CLI.

1. Connect to your console and get root privileges.

2. Run the desired commands to manage profiles:

   • Revoke all certificates for the user:

     sacli --user [username] RevokeUser

   • Revoke the oldest user-locked certificate with a specific common name:

     sacli --cn [common name] RevokeUserProfile

   • Revoke the oldest autologin certificate with a specific common name:

     sacli --cn [common name]_AUTOLOGIN RevokeUserProfile

   • Revoke a certificate by its serial number:

     sacli --sn [serial number] RevokeUserProfile

     1. 1

        The serial number for a profile is displayed in the Admin Web UI under Certificate Management > VPN Client Certificates. You can also check it from CLI with ./sacli listclientsdetail.