Cisco CRS User Manual

crypto key zeroize rsa
To delete all Rivest, Shamir, and Adelman (RSA) keys from the router, use the crypto key zeroize rsa
command.
crypto key zeroize rsa [ keypair-label ]
Syntax Description
(Optional) Names the RSA key pair to be removed.
keypair-label
Command Default
If the key pair label is not specified, the default RSA key pair is removed.
Command Modes
EXEC
Command History
ModificationRelease
This command was introduced.Release 2.0
Usage Guidelines
Use the crypto key zeroize rsa command to delete all RSA keys that were previously generated by the router.
After issuing this command, you must perform two additional tasks:
•
Ask the certification authority (CA) administrator to revoke the certificates for the router at the CA; you
must supply the challenge password you created when you originally obtained the router certificates
with the crypto ca enroll, on page 191 command CA.
•
Manually remove the certificates from the configuration using the clear crypto ca certificates command.
Task ID
OperationsTask ID
executecrypto
Examples
The following example shows how to delete the general-purpose RSA key pair that was previously generated:
RP/0/RP0/CPU0:router# crypto key zeroize rsa key1
% Keys to be removed are named key1
Do you really want to remove these keys? [yes/no]: yes
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
OL-24740-01 203
Public Key Infrastructure Commands
crypto key zeroize rsa

Cisco CRS Specifications

General

Brand	Cisco
Model	CRS
Category	Network Router
Language	English