To revoke a user's decryption key from the Encryption key manager screen, right-click on the key from the list and select Revoke. A Confirm window opens alerting you to the fact that the decryption key cannot be re-enabled and the user will not be able to access any encrypted data unless a new key is generated.