Disable an Intermediate or Root Certificate on Windows Server

It might be necessary to disable certificate via Windows' MMC to ensure that the correct certificate chain is used.

This page describes the appropriate procedure.

1 - Run the MMC

• Open the Windows Run dialog by clicking Run in the Start Menu or using the Win+r shortcut. Then type mmc and click OK.
  
  
• Click on the File menu then on Add/Remove Snap-in.
  
  
• Click on Certificates then on Add.
  
  
• Select your Windows Account type then complete the information required.
  
  
• Then click OK.
  
  

2 - Disabling a certificate

• You can now deploy the certificate tree to select the correct store, then, in the certificate list, right-click the certificate you want to disable. Then, select Properties.
  
  
• In the tab General, in the field Certificate Purpose, select Disable all purposes for this certificate.
  
  
• Then click OK. The certificate is now disabled.

Additional ressources

• Install a root or intermediate certificate manually
• Intermediate Certificate List