If any host or certificate becomes compromised, the compromised single certificate can be unbound using the Certificate Management Console. When the certificate is unbound, the compromised component can communicate with other CCS components. The Symcertuntrust command places the certificate in an untrusted store and revokes communications with that certificate. The certificate of the single component must be regenerated and bound with the Control Compliance Suite system, and the component is fully functional again.
You can review the certificates in the following locations: