pki delete-certificate built-in-ca

Function

The pki delete-certificate built-in-ca command deletes an SSL decryption certificate from the memory.

Format

pki delete-certificate built-in-ca filename file-name

Parameters

Parameter	Description	Value
filename file-name	Specifies the name of an SSL decryption certificate file.	The SSL decryption certificate file name must already exist in the memory.

Views

System view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

When an SSL decryption certificate expires or you want to apply for a new certificate, run the pki delete-certificate built-in-ca command to delete the current SSL decryption certificate from the memory. This command will not delete the certificate files in the device storage.

Prerequisites

The SSL decryption certificate has been imported to the memory using the pki import-certificate built-in-ca command.

Precautions

In dual-node hot standby scenarios, the backup node does not support the function of deleting a certificate from the memory.

Example

# Delete an SSL decryption certificate from the memory.

<sysname> system-view
[sysname] pki import-certificate built-in-ca filename test_builtinca.cer
 Info: Succeeded in importing the built in CA certificate.  
[sysname] pki delete-certificate built-in-ca filename test_builtinca.cer