Remove Root Certificates from System Keychain

[mapurcel]

We put our root certificates in the System keychain but now have a duplicate set of certs (one set is expired). Does anyone know of a way to remove certificates from the System keychain in an automated way?

thanks in advance for any suggestions

[hkabik · Accepted solution]

sudo security delete-certificate -Z certificate-hash-here /Library/Keychains/System.keychain

[mapurcel]

Thanks!