HP Cisco MDS 9216i Cisco MDS 9000 Family Command Reference - Cisco MDS SAN-OS - Page 305

Chapter 5 D Commands delete ca-certificate Send documentation comments to [email protected] delete ca-certificate To delete certificate authority certificates, use the delete ca-certificate command in trust point configuration submode. delete ca-certificate Syntax Description This command has no arguments or keywords. Defaults None. Command Modes Trust point configuration submode. Command History Release 3.0(1) Modification This command was introduced. Usage Guidelines This command deletes the CA certificate or certificate chain corresponding to the trust point CA. As a result, the trust point CA is no longer trusted. If there is an identity certificate form the CA, you should delete it before attempting to delete the CA certificate. Doing so prevents the accidental deletion of a CA certificate when you have not yet deleted the identity certificate from that CA. This action may be necessary when you do not want to trust the CA any more for a reason such as the CA is compromised or the CA certificate is already expired, with the latter being a very rare event. Note The trust point configuration, certificates, and key pair configurations are made persistent only after saving to the startup configuration. To be consistent with this configuration behavior, the delete behavior is also the same. That is, the deletions are made persistent only after saving to the startup configuration. Use the copy running-config startup-config command to make the certificate and key pair deletions persistent. Examples The following example shows how to delete a certificate authority certificate. switch# config terminal switch(config)# crypto ca trustpoint admin-ca switch(config-trustpoint)# delete ca-certificate Related Commands Command delete certificate delete crl Description Deletes the identity certificate. Deletes the crl from the trustpoint. OL-16217-01, Cisco MDS SAN-OS Release 3.x Cisco MDS 9000 Family Command Reference 5-7