If you enable local encryption on a policy, each device that uses that policy receives an encryption certificate. When a user logs on to a device, they can only access the encrypted data if the certificate is in place.
If a device is lost or stolen, you can use Aranda Datasafe to remotely wipe the device’s certificate. Once the certificate is deleted, anyone, including the logged-in user, will not be able to access the encrypted data on the device (since the certificate is not on the device).
Using Aranda Datasafe to delete a certificate is known as “revoking a device.”
To revoke a device:
1. Click on Inventory or Protection.
2. In the list of devices, click on the device you want to revoke. The slide-out panel on your device appears.
3. Click on the Revoke Device icon.

⚐ > Note: The Revoke Device icon is also available on the device’s profile page (on the Inventory or Protection page, display the device’s side panel, and then click the view details icon to display the device’s profile page).
4. Click Revoke to confirm. The request to revoke the device is made. You can cancel the revocation request if necessary (display the device slider panel or device page, and then click the Cancel Revocation icon).

⚐ > Note: If Auto Revoke is enabled in a Policy, Aranda Datasafe will automatically revoke the certificate of any protected device that does not connect to Aranda Datasafe within a period of 30 days. (You can change the automatic revocation time period in the policy settings.)