You can delete a local or trusted CA certificate that is automatically or manually generated.
Before You Begin |
|---|
|
This topic covers:
Use the following command to delete a local certificate:
- user@host> clear security pki local
certificate certificate-id (certificate-id | all | system-generated )
Specify a certificate ID to delete a local certificate with a specific ID, use all to delete all local certificates, or specify system-generated to delete the automatically generated self-signed certificate.
When you delete an automatically generated self-signed certificate, the device generates a new one.
To delete a CA certificate:
Specify a CA profile to delete a specific CA certificate, or use all to delete all CA certificates present in the persistent store.
![]() |
Note: You are asked for confirmation before a CA certificate can be deleted. |