Cisco Catalyst 2960 Series, Configuration Manual

Page: 1239 / 2288

DETAILED STEPS
Purpose Command or Action
Enables privileged EXEC mode. enable
Example:
Device> enable
Step 1
• Enter your password if prompted.
Enters global configuration mode. configure terminal
Example:
Device# configure terminal
Step 2
Enters public key chain configuration mode, so that you can
manually specify other devices
’
RSA public keys.
crypto key pubkey-chain rsa
Example:
Device(config)# crypto key pubkey-chain rsa
Step 3
Deletes the RSA public key of a remote peer and enters
public key configuration mode. no named key key-name [ encryption | signature ]
Example:
Device(config-pubkey-c)# no named-key
otherpeer.example.com
Step 4
Exits public key configuration mode and returns to privileged
EXEC mode. end
Example:
Device(config-pubkey)# end
Step 5
Deleting Certificates from the Configuration
If the need arises, you can delete certificates that are saved in your device. Your devices saves its own
certificates, the certificate of the CA, and any RA certificates .
To delete the CA's certificate, you must remove the entire CA identity, which also removes all certificates
associated with the CA
— your router's certificate, the CA certificate, and any RA certificates.
SUMMARY STEPS
1.
enable
2. show crypto pki certificates
3. configure terminal
4.
crypto pki certificate chain name
5. no certificate certificate-serial-number
6. exit
7.
no crypto pki import name certificate
8. exit
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1157
Monitoring and Maintaining Certification Authority