Hi Ludovic, Thank you for the response. I am not using OCSP, so I tried removing some certificates in the database and it worked perfectly. For now, I will only be needing to revoke/delete around 70 certificates, all which use the same certificate template, so deleting them from the database is easy.
Thanks so much for your help. Will N Network and Systems Administrator From: Zammit, Ludovic <luza...@akamai.com> Sent: Friday, April 19, 2024 7:41 AM To: packetfence-users@lists.sourceforge.net Cc: Will Nygard <wnyg...@sd44.ca> Subject: [EXTERNAL] Re: [PacketFence-users] Revoking multiple PK-PKI certificates at a time Hello Will, If you are NOT using OCSP, you can just remove the certificate using MySQL command within PF database. If you are using OCSP you will need to provide the certificate ID in any way. How many certs are we talking about? Thanks, Ludovic Zammit Product Support Engineer Principal Lead [https://www.akamai.com/us/en/multimedia/images/custom/2019/logo-no-tag-93x45.png] Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: [https://www.akamai.com/us/en/multimedia/images/custom/community.jpg]<https://community.akamai.com/>[https://www.akamai.com/us/en/multimedia/images/custom/rss.png]<http://blogs.akamai.com/>[https://www.akamai.com/us/en/multimedia/images/custom/twitter.png]<https://twitter.com/akamai>[https://www.akamai.com/us/en/multimedia/images/custom/fb.png]<http://www.facebook.com/AkamaiTechnologies>[https://www.akamai.com/us/en/multimedia/images/custom/in.png]<http://www.linkedin.com/company/akamai-technologies>[https://www.akamai.com/us/en/multimedia/images/custom/youtube.png]<http://www.youtube.com/user/akamaitechnologies?feature=results_main> On Apr 18, 2024, at 11:49 AM, Will Nygard via PacketFence-users <packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>> wrote: Hi all, Does anyone know a way to revoke multiple PK-PKI certificates at once? I looked around on the web and was unable to find a way to do this. So far, revoking one at a time through the web console is working for me, as I'm just starting to implement EAP-TLS, but once I scale up it would be very time consuming to revoke all at once. The reason I need to revoke certificates en masse is to deal with an issue with Jamf Pro SCEP integration, which I saw another user dealing with in this email. https://urldefense.com/v3/__https://www.mail-archive.com/packetfence-users@lists.sourceforge.net/msg22151.html__;!!GjvTz_vk!RubQGmSHcWc82ONTU4JJxg3X558b_FcjeE1ETYiv47HZCn2Lv1dqFY3YCz2h4HPLTfRNsFHkX2Gh1bWmhkx6MNHbbaGoC3yjFhEXBg$<https://urldefense.com/v3/__https:/www.mail-archive.com/packetfence-users@lists.sourceforge.net/msg22151.html__;!!GjvTz_vk!RubQGmSHcWc82ONTU4JJxg3X558b_FcjeE1ETYiv47HZCn2Lv1dqFY3YCz2h4HPLTfRNsFHkX2Gh1bWmhkx6MNHbbaGoC3yjFhEXBg$> Any ideas? Thanks, Will N Systems and Network Administrator _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net> https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!RubQGmSHcWc82ONTU4JJxg3X558b_FcjeE1ETYiv47HZCn2Lv1dqFY3YCz2h4HPLTfRNsFHkX2Gh1bWmhkx6MNHbbaGoC3z86Kdf0A$<https://urldefense.com/v3/__https:/lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!RubQGmSHcWc82ONTU4JJxg3X558b_FcjeE1ETYiv47HZCn2Lv1dqFY3YCz2h4HPLTfRNsFHkX2Gh1bWmhkx6MNHbbaGoC3z86Kdf0A$>
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
