Use the undo pki certificate access-control-policy command to remove certificate attribute-based access
control policies.
No access control policy exists by default.
Examples
# Configure an access control policy named mypolicy and enter its view.
<Sysname> system-view
[Sysname] pki certificate access-control-policy mypolicy
[Sysname-pki-cert-acp-mypolicy]
pki certificate attribute-group
Syntax
pki certificate attribute-group group-name
undo pki certificate attribute-group { group-name | all }
View
System view
Default level
2: System level
Parameters
group-name: Name for the certificate attribute group, a case-insensitive string of 1 to 16 characters. It
cannot be a, al, or all.
all: Specifies all certificate attribute groups.
Description
Use the pki certificate attribute-group command to create a certificate attribute group and enter its view.
Use the undo pki certificate attribute-group command to delete certificate attribute groups.
By default, no certificate attribute group exists.
Examples
# Create a certificate attribute group named mygroup and enter its view.
<Sysname> system-view
[Sysname] pki certificate attribute-group mygroup
[Sysname-pki-cert-attribute-group-mygroup]
pki delete-certificate
Syntax
pki delete-certificate { ca | local } domain domain-name
View
System view
Default level
2: System level
223