Deleting Rsa Keys From A Device - Cisco Catalyst 2960 series Configuration Manual

DETAILED STEPS
Command or Action
Step 1
enable
Example:
Device> enable
Step 2
configure terminal
Example:
Device# configure terminal
Step 3 crypto pki trustpoint name
Example:
Device(ca-trustpoint)# crypto pki trustpoint
mytp
Step 4
crl query ldap ://url : [port]
Example:
Device(ca-trustpoint)# crl query
ldap://url:[port]
Step 5 end
Example:
Device(ca-trustpoint)# end

Deleting RSA Keys from a Device

Under certain circumstances you may want to delete RSA keys from your device. For example, if you believe
the RSA keys were compromised in some way and should no longer be used, you should delete the keys.
]
SUMMARY STEPS
1. enable
2. configure terminal
3. crypto key zeroize rsa [key-pair-label]
4. end
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
Monitoring and Maintaining Certification Authority
Purpose
Enables privileged EXEC mode.
• Enter your password if prompted.
Enters global configuration mode.
Declares the trustpoint that your device should use and enters
CA trustpoint configuration mode.
Queries the CRL to ensure that the certificate of the peer
has not been revoked.
Exits CA trustpoint configuration mode and returns to
privileged EXEC mode.
1155