Revocation is an irreversible state and means definitively invalidating a digital certificate.

Revocation of a certificate can be requested by:

  • The service manager
  • The person holding the certificate
  • The AOC Consortium, as a provider of digital certification services

Below we explain how to carry out the revocation depending on the applicant:

Steps to be followed by the Digital Certification Service Manager

1. Access EACAT > Procedures>Consortium AOC>Digital Certification Service> T-CAT: Request for revocations.

2. In the “Initial information” tab, the revoke certificates option is already selected, so click “Save draft” to continue.

3. In the “Request details” tab, you can enter the details of the certificate to be revoked, or you can search for the certificate with the magnifying glass.

If you select the magnifying glass option, the following screen will open:

Image1.png

Fill in the following information:

  • “Name” or “NIF/NIE” of the certificate to be revoked.
  • The status of the certificate, which in our case is “Valid” by default, since if it is expired it cannot be revoked.
  • Select the “Certificate Type”

Click on “Search” and once the certificate appears, select it and click on “Select” to continue.

4. In the “Request Announcements” tab, select the reason for revocation and then “Next”

The main reasons for revocation are:

  • Compromise of the information contained in the certificate (for example change of subscriber data)
  • Compromise of the security of the key or certificate (for example suspected fraudulent use of the certificate or PIN and PUK).
  • Compromise of the cryptographic device (for example loss or unusability of the cryptographic device)
  • Reasons relating to the subscriber or key holder (for example end of the subscriber's contractual relationship or change in the subscriber's data).
  • Inclusion in the list of prohibited subscribers (for example inclusion of a subscriber in the list of prohibited subscribers).
  • Others

5. Then send the request for signature using the “Send for signature” button. The user with the role of personal certificate applicant must sign the submission from EACAT/My procedures/To sign, pressing the “Sign” button.

The request will be registered in EACAT and within a few minutes the certificate will be automatically revoked. Once registered in EACAT the revocation is entered into the system and there is no possibility of reversing the request.

Steps to follow by the person holding the certificate

1. Access https://scd.aoc.cat/revocar

2. Fill in the requested information and click "Revoke"

If you don't remember the management code:

  • You can find it in the email you received with the PIN and PUK codes.
  • You can find it on the delivery slip you signed when you received the T-CAT.
  • You can recover it by clicking the red link located at the bottom of the screen and you will recover the T-CAT management code by email.

3. Once revoked, you will receive an email to the address provided on the certificate confirming that it has been revoked.

Image5.png

A message will also appear on the revocation screen:

Image6.png

You can also revoke your certificate by calling 900 90 50 90 (24-hour service, 7 days a week), where you will also need to indicate the management code.

You might be interested