>
    Strata Copilot
    Disable or Delete Signing Keys
    Focus
    Focus
    1. Home
    2. Next‑Gen Trust Security
    3. Next-Gen Trust Security
    4. Next-Gen Trust Security Overview
    5. Introduction to the Code Signing Capability
    6. Using the Signing Key Inventory
    7. Disable or Delete Signing Keys
    Next‑Gen Trust Security

    Disable or Delete Signing Keys

    Table of Contents

    Disable or Delete Signing Keys

    Disabling a Signing Key prevents it from being used but keeps it in the inventory. You can renew a disabled key later if needed.
    Deleting a Signing Key permanently removes it from the inventory. Deleted keys cannot be recovered.

    Disable a Signing Key

    1. Sign in to Next-Gen Trust Security.
    2. Click Insights > Signing Keys.
    3. Select the Signing Key to open its details drawer.
    4. Select Disable on the details drawer.
    After the Signing Key is disabled, it remains in the inventory with a Disabled status. It cannot be used for signing again until it is renewed.

    Delete a Signing Key

    Warning: Deleting a Signing Key is permanent and cannot be undone. If you are unsure, disable the key instead to prevent its use while keeping it in the inventory.
    1. Sign in to Next-Gen Trust Security.
    2. Click Insights > Signing Keys.
    3. Select the Signing Key to open its details drawer.
    4. Select Delete on the details drawer.
    5. Confirm the deletion when prompted, and then select Delete again.
    The Signing Key is removed from the inventory and cannot be recovered.

    © 2026 Palo Alto Networks, Inc. All rights reserved.