pki delete-certificate

Function

The pki delete-certificate command deletes a certificate from the memory.

Format

pki delete-certificate { ca | local | ocsp } realm realm-name

Only devices in NETCONF mode support the ocsp parameter.

Parameters

Parameter	Description	Value
ca	Deletes a CA certificate.	-
local	Deletes a local certificate.	-
ocsp	Deletes an Online Certificate Status Protocol (OCSP) server's certificate.	-
realm realm-name	Specifies the name of the PKI realm to which a certificate belongs.	The value must be an existing PKI realm name.

Views

System view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

When the certificate expires or you want to apply for a new certificate, run this command to delete the CA certificate, OCSP server certificate, or local certificate from the memory.

Prerequisites

A PKI realm has been created using the pki realm (system view) command.

Precautions

Deleting a certificate may interrupt certificate-related services.

Example

# Delete the local certificate from the memory.

<HUAWEI> system-view
[HUAWEI] pki delete-certificate local realm abc