Detach and Revoke Client Certificate
You can detach a VPN user from a VPN gateway and also revoke their user certificate.
You may do this if you want to:
- 
Deactivate a user 
- 
Connect the user to a different VPN gateway on another VPC. You can reissue a new client certificate to the user after detaching and revoking the current certificate. 
- 
Repair a compromised device: after the device is repaired/cleaned you can reissue a new client certificate to the user. 
To detach and revoke the client certificate:
- 
In CoPilot, go to Cloud Fabric > UserVPN > Users. 
- 
Select the checkbox next to one or more VPN users. 
- 
Click the Actions menu and select Detach and Revoke Client Certificate.