Destroying A Local Rsa Key Pair; Deleting A Certificate - HP 5120 EI Switch Series Configuration Manual

To do...
Enter PKI domain view
Disable CRL checking
Return to system view
Retrieve the CA certificate
Verify the validity of the certificate
NOTE:

The CRL update period refers to the interval at which the entity downloads CRLs from the CRL server. The CRL
update period configured manually is prior to that specified in the CRLs.

The pki retrieval-crl domain configuration will not be saved in the configuration file.

The URL of the CRL distribution point does not support domain name resolution.

Destroying a local RSA key pair

A certificate has a lifetime, which is determined by the CA. When the private key leaks or the certificate
is about to expire, destroy the old RSA key pair and then create a pair to request a new certificate.
Follow these steps to destroy a local RSA key pair:
To do...
Enter system view
Destroy a local RSA key pair
NOTE:
For more information about the public-key local destroy command, see the
Reference
.

Deleting a certificate

When a certificate requested manually is about to expire or you want to request a new certificate, delete
the current local certificate or CA certificate.
Follow these steps to delete a certificate:
To do...
Enter system view
Delete certificates
Use the command...
pki domain domain-name
crl check disable
quit
See ―Retrieving a certificate
manually―
pki validate-certificate { ca | local
} domain domain-name
Use the command...
system-view
public-key local destroy rsa
Use the command...
system-view
pki delete-certificate { ca | local }
domain domain-name
196
Remarks
—
Required
Enabled by default
—
Required
Required
Remarks
—
Required
Security Command
Remarks
—
Required