To Disable a Root Certificate with MMC:
Here’s how to disable a root certificate in Microsoft Management Console.
Open MMC by pressing the Windows key on your keyboard and then typing “MMC”…
…then hit Enter or double-click the icon to start the application.
In MMC, select File > Add/Remove Snap-In (or type control-M).
- Add the “Certificates” Snap-In.
Select “Computer Account” and click the Next button…
…then select “Local computer”, then the Finish button.
- Click OK to close the Add/Remove Snap-In wizard.
In MMC, click the arrow next to “Certificates (Local Computer)” to reveal the various certificate stores, then click the arrow next to your target certificate, and finally click the “Certificates” folder.
- In the list of certificates, look for your target entry (here, “USERTrust RSA Certification Authority”).
- Right-click the target entry and select “Properties” from the dropdown menu.
In the Properties panel, select “Disable all purposes for this certificate”, then click Apply to implement the changes and OK to close the panel.
- Now restart your Windows computer to have your changes take effect.