Delete Ca-Certificate - Cisco AJ732A - MDS 9134 Fabric Switch Command Reference Manual

Cisco mds 9000 family command reference guide - release 4.x (ol-18089-01, february 2009)

Hide thumbs Also See for AJ732A - Cisco MDS 9134 Fabric Switch:

Table of Contents

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

delete ca-certificate

To delete certificate authority certificates, use the delete ca-certificate command in trust point

configuration submode.

Syntax Description

This command has no arguments or keywords.

Command Modes

Trust point configuration submode.

Command History

Usage Guidelines

This command deletes the CA certificate or certificate chain corresponding to the trust point CA. As a

result, the trust point CA is no longer trusted. If there is an identity certificate form the CA, you should

delete it before attempting to delete the CA certificate. Doing so prevents the accidental deletion of a CA

certificate when you have not yet deleted the identity certificate from that CA. This action may be

necessary when you do not want to trust the CA any more for a reason such as the CA is compromised

or the CA certificate is already expired, with the latter being a very rare event.

The trust point configuration, certificates, and key pair configurations are made persistent only after

saving to the startup configuration. To be consistent with this configuration behavior, the delete behavior

is also the same. That is, the deletions are made persistent only after saving to the startup configuration.

Use the copy running-config startup-config command to make the certificate and key pair deletions

The following example shows how to delete a certificate authority certificate:

switch# config terminal

switch(config)# crypto ca trustpoint admin-ca

switch(config-trustpoint)# delete ca-certificate

Related Commands

delete certificate

OL-18089-01, Cisco NX-OS Release 4.x

delete ca-certificate

Modification

This command was introduced.

Deletes the identity certificate.

Deletes the crl from the trustpoint.

Cisco MDS 9000 Family Command Reference

delete ca-certificate