Configure Retention Policy for Archived and Non-Archived Certificates
Use this procedure to configure archival retention for archived non-active certificates and standard 60-day purge behavior for non-archived non-active certificates.
Archived certificates follow a separate archival retention policy and are exempt from the default non-active purge period.
Non-archived certificates that remain non-active because of expiry or revocation for 60 consecutive days are purged automatically.
-
Go to Menu > KUBE >
System Administration > Expired
Certificates.
The expired certificate configuration page is displayed.
-
Configure the standard purge setting for non-archived non-active
certificates.
Expired or revoked certificates that are not archived follow the standard 60-day purge policy.
-
Locate the archived certificate retention settings.
Archived certificate retention controls are available for configuration.
-
Configure a retention period for archived non-active certificates according
to your policy.
Archived certificates are set to follow archival retention instead of standard non-active purge behavior.
-
Click Save.
The separate archival retention policy is saved.
Non-archived expired or revoked certificates are purged after 60 consecutive days, while archived non-active certificates are retained until the archival retention period expires.
Note:
- Review retention settings periodically to align with governance and compliance requirements.
- Deletion of non-archived non-active certificates should remain auditable through the applicable operational records.
