Previous Topic: How Deactivated Keys Are Managed

Next Topic: Mark a Currently Active Key as Compromised

Deactivate a Key

Use the Deactivate attribute to deactivate an entire parmlib keyname that is no longer needed.

To deactivate a key

Specify the following attribute in the <key_section> of the key you want to deactivate:

Deactivate=Y

The current instance of the key is deactivated, and all future generations of the key are removed.