Crypto Key Zeroize Rsa - Cisco CRS User Manual

Public Key Infrastructure Commands

crypto key zeroize rsa

To delete all Rivest, Shamir, and Adelman (RSA) keys from the router, use the crypto key zeroize rsa
command.
crypto key zeroize rsa [ keypair-label ]
Syntax Description
keypair-label
Command Default
If the key pair label is not specified, the default RSA key pair is removed.
Command Modes
EXEC
Command History
Release
Release 2.0
Usage Guidelines
Use the crypto key zeroize rsa command to delete all RSA keys that were previously generated by the router.
After issuing this command, you must perform two additional tasks:
• Ask the certification authority (CA) administrator to revoke the certificates for the router at the CA; you
• Manually remove the certificates from the configuration using the clear crypto ca certificates command.
Task ID
Task ID
crypto
Examples The following example shows how to delete the general-purpose RSA key pair that was previously generated:
RP/0/RP0/CPU0:router# crypto key zeroize rsa key1
% Keys to be removed are named key1
Do you really want to remove these keys? [yes/no]: yes
OL-24740-01
must supply the challenge password you created when you originally obtained the router certificates
with the crypto ca enroll, on page 191
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
(Optional) Names the RSA key pair to be removed.
Modification
This command was introduced.
command CA.
Operations
execute
crypto key zeroize rsa
203