Revoke a document
Revoking a document makes it permanently invalid: verifiers that check its status, including LutraID checks by default, reject it once the change is published. It can't be undone. LutraID issues documents with a status list, which is what makes them revocable.
Revoking one
- Open Records and open the issuance record for the offer.
- In the record's Documents section, find the document the wallet added.
- Choose Revoke document, fill in Reason (optional) if you like, and confirm with Revoke document.
The reason is shown on the record to your team. The record also keeps who revoked the document and when. Revoking can't be paused or reversed; there is no suspend. To give the customer a valid document again, send a new offer.
Owners and admins can revoke documents. Other roles see the record but not the button.
Whether a document can be revoked
A document that can't be revoked shows "This document was issued without a status list, so it can't be revoked." in the record's Documents section.
This is expected for documents issued without a status list, not an error. A status list can't be added to a document after it's issued.
What happens after
Revocation is recorded straight away. Publishing it to the status list that wallets and verifiers check takes a little longer, and the record shows where it stands:
| Status on the record | Meaning |
|---|---|
| Revoked. Publishing the change now | The change is being published |
| Revocation published | Checks of this document fail within about five minutes, once verifiers refresh |
| Revoked, but not published yet | Publishing failed for now. LutraID keeps trying; checks may still find the document valid until it succeeds |
If publishing stays failed, ask support and include the record's reference.
What else affects validity
| Lever | Effect |
|---|---|
| Document lifetime | One year for both SD-JWT VC and ISO mdoc: a natural backstop even without revocation |
| Signing certificate | Retiring one affects every document it signed: a blunt instrument, not a substitute for revocation |
| Check | Tighten what your own verifiers accept, independent of what the issuer has revoked |
For high-stakes cases where a document can't be revoked, issue a replacement with correct data and treat the newer one as authoritative in your own systems.