7.9.6 RevokeCertificate
The RevokeCertificate Method is used to revoke a Certificate issued by the CertificateManager.
When a Certificate is revoked it shall be removed from any TrustLists that it is in and TrustLists with the issuer Certificate shall be updated with the new CRL.
Certificates assigned to an application are automatically revoked when the UnregisterApplication Method is called (see 6.5.8).
This Method shall be called from an authenticated SecureChannel and from a Client that has access to the CertificateAuthorityAdmin Role (see 7.2).
If auditing is supported, the CertificateManager shall generate the CertificateRevokedAuditEventType on success.
Signature
RevokeCertificate (
[in] NodeId ApplicationId
[in] ByteString Certificate
);| Argument | Description |
| ApplicationId | The identifier assigned to the application by the CertificateManager. |
| Certificate | The DER encoded Certificate to revoke. |
Method Result Codes (defined in Call Service)
| Result Code | Description |
| Bad_NotFound | The ApplicationId does not refer to a registered application. |
| Bad_InvalidArgument | The certificate is not a Certificate for the specified application that was issued by the CertificateManager. |
| Bad_UserAccessDenied | The current user does not have the rights required. |
| Bad_SecurityModeInsufficient | The SecureChannel is not authenticated. |
Table 78 specifies the AddressSpace representation for the RevokeCertificate Method.
| Attribute | Value | ||||
| BrowseName | 2:RevokeCertificate | ||||
| References | NodeClass | BrowseName | DataType | TypeDefinition | ModellingRule |
|---|---|---|---|---|---|
| 0:HasProperty | Variable | 0:InputArguments | 0:Argument[] | 0:PropertyType | Mandatory |
| Conformance Units | |||||
|---|---|---|---|---|---|
| GDS Certificate Manager RevokeCertificate |