Zeroization
Certificate and key removal is discussed as part of the
no form of each certificate installation command above. The no forms described above delete certificates and keys. The “Zeroize” command simply deletes (unlinks) key files. Full file system zeroization is performed by following with FIPS/Secure Mode commands.
The
no form is supported only for TA profile and identity profile. It is not supported for local certificate. Zeroization erases keys and related PKI data such as CSRs and TA profiles from the file system.
Syntax
crypto pki zeroize
This command returns crypto pki configuration to the factory default state by deleting all certificates and related private keys. The Trust Anchor profile and switch identity profile configurations are also removed.
The
no form is not available for the certificate command. To remove a certificate from the switch, use the
clear command.