windowscertificate

Remove Old NTAuth CA


I can see 2 CA certificates with this command.

Certificate preview

1

certutil.exe -enterprise -viewstore NTAuth

These are remnants of the CA that was uninstalled.

Is it safe to delete it ? If yes, how do I delete it?

I only see the registry keys

Registry preview

2

but I can't find them in the certificate mmc.

Regards,


Solution

  • I answer to myself if it help someone. In an admin's shell, launch these 2 commands:

    certutil -viewdelstore " ldap:///CN=NtAuthCertificates,CN=Public Key
    Services,...,DC=ForestRoot,DC=com?cACertificate?base?objectclass=certificationAuthority"
    
    certutil -viewdelstore " ldap:///CN=NtAuthCertificates,CN=Public Key
    Services,...,DC=ForestRoot,DC=com?cACertificate?base?objectclass=pKIEnrollmentService"