Send documentation comments to mdsfeedback-doc@cisco.com
5-7
Cisco MDS 9000 Family Command Reference
OL-8413-07, Cisco MDS SAN-OS Release 3.x
Chapter 5 D Commands
delete ca-certificate
delete ca-certificate
To delete certificate authority certificates, use the delete ca-certificate command in trust point
configuration submode.
delete ca-certificate
Syntax Description This command has no arguments or keywords.
Defaults None.
Command Modes Trust point configuration submode.
Command History
Usage Guidelines This command deletes the CA certificate or certificate chain corresponding to the trust point CA. As a
result, the trust point CA is no longer trusted. If there is an identity certificate form the CA, you should
delete it before attempting to delete the CA certificate. Doing so prevents the accidental deletion of a CA
certificate when you have not yet deleted the identity certificate from that CA. This action may be
necessary when you do not want to trust the CA any more for a reason such as the CA is compromised
or the CA certificate is already expired, with the latter being a very rare event.
Note The trust point configuration, certificates, and key pair configurations are made persistent only after
saving to the startup configuration. To be consistent with this configuration behavior, the delete behavior
is also the same. That is, the deletions are made persistent only after saving to the startup configuration.
Use the copy running-config startup-config command to make the certificate and key pair deletions
persistent.
Examples The following example shows how to delete a certificate authority certificate.
switch# config terminal
switch(config)# crypto ca trustpoint admin-ca
switch(config-trustpoint)# delete ca-certificate
Related Commands
Release Modification
3.0(1) This command was introduced.
Command Description
delete certificate Deletes the identity certificate.
delete crl Deletes the crl from the trustpoint.
To Next Page
Loading...
Need help?
General