HP Cisco MDS 9020 Cisco MDS 9000 Family Command Reference - Cisco MDS SAN-OS R - Page 306

delete certificate Chapter 5 D Commands Send documentation comments to [email protected] delete certificate To delete the identity certificate, use the delete certificate command in trust point configuration submode. delete certificate [force] Syntax Description force Forces the deletion of the identity certificate. Defaults None. Command Modes Trust point configuration submode. Command History Release 3.0(1) Modification This command was introduced. Usage Guidelines Use this command to delete the identity certificate from the trust point CA. This action may be necessary when the identity certificate expires or the corresponding key pair is compromised. Applications will be left without any identity certificate to use after the deletion of the last or the only identity certificate present. Accordingly, an error message is generated if the certificate being deleted is the last or only identity certificate present. If needed, the deletion can still be accomplished by forcing it using the force option. Note The trust point configuration, certificates, and key pair configurations are made persistent only after saving to the startup configuration. To be consistent with this configuration behavior, the delete behavior is also the same. That is, the deletions are made persistent only after saving to the startup configuration. Use the copy running-config startup-config command to make the certificate and key pair deletions persistent. Examples The following example shows how to delete the identity certificate. switch# config terminal switch(config)# crypto ca trustpoint admin-ca switch(config-trustpoint)# delete certificate The following example shows how to force the deletion of the identity certificate. switch(config-trustpoint)# delete certificate force Cisco MDS 9000 Family Command Reference 5-8 OL-16217-01, Cisco MDS SAN-OS Release 3.x