Certificate Verification & Revocation
Who this guide is for: Tenant administrators who need third parties (employers, auditors, regulators) to confirm a certificate is genuine, and who occasionally need to revoke a certificate issued in error or no longer valid.
Every issued certificate has a public verification page that anyone can open without logging in, and admins can revoke a certificate so that page shows it as no longer valid.
Public verification
Each certificate has a stable verification URL on your tenant domain:
https://<your-tenant>.embaylms.com/<locale>/verify/<certificate-number>The page shows the learner name, the credential (course or learning path), the issue date, the certificate number, and a clear status banner:
- ✓ Valid — the certificate is genuine and current.
- Revoked — the certificate was revoked (with date and reason).
- Not found — no certificate matches that number.
Learners can reach it themselves from My Credentials → Verify on any certificate. No personal data beyond what already appears on the certificate is exposed.
Revoking a certificate
Revocation is an admin action (course:update permission).
- Open the learner’s credential wallet in admin view:
/<locale>/learn/credentials?userId=<learner-user-id>. - Find the certificate and click Revoke.
- Enter a reason (required) and confirm.
The certificate is immediately marked revoked. Its public verification page now shows Revoked with the date and reason, and the wallet shows a Revoked badge. Revocation is recorded in the audit log (actor, time, reason).
Revocation cannot be undone from the UI. If a certificate was revoked in error, re-issue it (complete/re-complete the course, or contact Embay support).
Configuration reference
| Action | Where | Permission | Audited |
|---|---|---|---|
| View public verification | /<locale>/verify/<number> | None (public) | No |
| Revoke a certificate | Credential wallet (admin view) | course:update | Yes (revoked) |
Troubleshooting
| Symptom | Cause | Fix |
|---|---|---|
| Verify page says “Not found” | Wrong/mistyped number, or wrong tenant domain | Check the exact number from the certificate; use the correct tenant subdomain |
| No Revoke button | You’re viewing your own wallet, not admin view, or lack course:update | Open …/learn/credentials?userId=<id> as an admin |
| ”Certificate is already revoked” | The certificate was revoked previously | No action needed — it’s already invalid |