S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
5-7
Cisco MDS 9000 Family Command Reference
OL-18089-01, Cisco NX-OS Release 4.x
Chapter 5 D Commands
delete ca-certificate
delete ca-certificate
To delete certificate authority certificates, use the
delete ca-certificate
command in trust point
configuration submode.
delete ca-certificate
Syntax Description
This command has no arguments or keywords.
Defaults
None.
Command Modes
Trust point configuration submode.
Command History
Usage Guidelines
This command deletes the CA certificate or certificate chain corresponding to the trust point CA. As a
result, the trust point CA is no longer trusted. If there is an identity certificate form the CA, you should
delete it before attempting to delete the CA certificate. Doing so prevents the accidental deletion of a CA
certificate when you have not yet deleted the identity certificate from that CA. This action may be
necessary when you do not want to trust the CA any more for a reason such as the CA is compromised
or the CA certificate is already expired, with the latter being a very rare event.
Note
The trust point configuration, certificates, and key pair configurations are made persistent only after
saving to the startup configuration. To be consistent with this configuration behavior, the delete behavior
is also the same. That is, the deletions are made persistent only after saving to the startup configuration.
Use the
copy running-config startup-config
command to make the certificate and key pair deletions
persistent.
Examples
The following example shows how to delete a certificate authority certificate:
switch#
config terminal
switch(config)#
crypto ca trustpoint admin-ca
switch(config-trustpoint)#
delete ca-certificate
Related Commands
Release
Modification
3.0(1)
This command was introduced.
Command
Description
delete certificate
Deletes the identity certificate.
delete crl
Deletes the crl from the trustpoint.