Destroying a local key pair

To ensure security, destroy the local key pair and generate a new key pair in any of the following situations:

• The local key has leaked. An intrusion event might occur.

• The storage media of the device is replaced.

• The local certificate has expired. For more information about local certificates, see "Configuring PKI."

1. Enter system view.

   system-view

2. Destroy a local key pair.

   public-key local destroy { dsa | ecdsa | rsa } [ name key-name ]