HP MSR Series Command Reference Manual page 310

undo usage [ ike | ssl-client | ssl-server ] *
Default
No extension is specified, and a certificate can be used for all applications, including IKE, SSL clients,
and SSL servers.
Views
PKI domain view
Predefined user roles
network-admin
Parameters
ike: Specifies the IKE certificate extension so IKE peers can use the certificates.
ssl-client: Specifies the SSL client certificate extension so the SSL client ends can use the certificates.
ssl-server: Specifies the SSL server certificate extension so the SSL server ends can use the certificates.
Usage guidelines
If you do not specify any keywords, the undo usage command removes all extensions. The extension of
a certificate depends on the certificate user, and it is not limited by PKI.
The extension options contained in an issued certificate depends on the CA policy, and might be
different from those specified in the PKI domain.
Examples
# Specify the IKE certificate extension.
<Sysname> system-view
[Sysname] pki domain aaa
[Sysname-pki-domain-aaa] usage ike
296