The Local Registration Authority (LRA) is authorized to revoke, suspend, and restore certificates.

• A. True
• B. False
• C. LRA can only revoke
• D. LRA can only suspend

Answer: (A)

Managing certificate status is central to keeping a PKI trusted. The Local Registration Authority operates under the Certificate Authority’s policy to handle changes to a certificate’s validity. When a certificate is no longer trustworthy—such as in a key compromise or if the user leaves—the LRA can revoke it so it’s no longer accepted as valid. If there’s a temporary issue—like needing to pause a user’s access—the LRA can suspend the certificate to prevent use without permanently invalidating it. Once the issue is resolved, the certificate can be restored and reactivated, subject to policy. This combination of revocation, suspension, and restoration reflects how the LRA manages the lifecycle of certificates to maintain trust in the PKI.