Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Zeroizing the System


The request system zeroize command is a standard Junos OS operational mode command that you can use to revert a router or switch to the factory-default configuration. The operation unlinks all user-created data files, including customized configuration and log files, from their directories. The router or switch then reboots and reverts to the factory-default configuration. Your device is not considered a valid cryptographic module until all critical security parameters (CSPs) have been entered while the device is running the Junos OS in FIPS mode.

Best Practice

You must zeroize the system to remove all plain-text passwords, secret data, and private keys and CSPs, when no longer required.

The Crypto Officer runs the request system zeroize command to remove all user-created files from a device and replace the user data with zeros. This command completely erases all configuration information on the Routing Engines, including all rollback configuration files and plain-text passwords, secret data, and private keys and CSPs for SSH, local encryption, local authentication, IPsec, and SNMP.

To zeroize your device:


Perform system zeroization with care. After the zeroization process is complete, no data is left on the Routing Engine. The device is returned to the factory default state, without any configured users or configuration files.

  1. From the CLI, enter:
  2. To initiate the zeroization process, type yes at the prompt:

    The entire operation can take considerable time depending on the size of the media, but all CSPs are removed within a few seconds. The physical environment must remain secure until the zeroization process is complete.