pki rsa local-key-pair destroy

Function

The pki rsa local-key-pair destroy command deletes the specified RSA key pair.

Format

pki rsa local-key-pair destroy key-name

Parameters

Parameter	Description	Value
key-name	Specifies the name of the RSA key pair to be deleted.	The value must be the name of an existing key pair.

Views

System view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

It is recommended that you run this command to destroy the specified RSA key pair if it is leaked, damaged, unused, or lost.

After this command is executed, the specified RSA key pair is deleted from the active device and the standby device.

Prerequisites

The RSA key pair has been created using the pki rsa local-key-pair create command or the RSA key pair has been imported to the memory using the pki import rsa-key-pair command.

Precautions

The RSA key pair in the creation process cannot be deleted.

The RSA key pair referenced by a PKI realm or CMP session cannot be deleted. They can be deleted only after the reference relationship is removed.

Example

# Delete the RSA key pair test.

<HUAWEI> system-view
[HUAWEI] pki rsa local-key-pair create test
 Info: The name of the new key-pair will be: test
 The size of the public key ranges from 512 to 4096.
 Input the bits in the modules:2048
 Generating key-pairs...
.....+++
..........................+++ 
[HUAWEI] pki rsa local-key-pair destroy test
 Warning: The name of the key pair to be deleted is test.                   
 Are you sure you want to delete the key pair? [y/n]:y                          
 Info: Delete RSA key pair success.