Use this command to remove a single certificate from a list, an entire list of certificates, or to completely remove every certificate and list.
pki-cert-list | (Optional) Specify the certificate list to be cleared. |
fingerprint | (Optional) Specify a single certificate to clear using the certificate fingerprint. |
no-confirm | (Optional) Specify that no confirmation of the clear will take place. |
If no options are specified, all PKI certificates and certificate lists are deleted.
If fingerprint is not specified, all certificates for the specified certificate list are deleted and the certificate list is deleted.
If no-confirm is not specified, you will be asked to confirm the clear request before it takes place.
All command modes with admin privilege.
A certificate fingerprint is a Hex sequence used to authenticate or look up a longer public key. Fingerprints are created by applying a cryptographic hash function to the public portion of the certificate. Fingerprints simplify certificate management.
This example shows how to clear all certificates and certificate lists:
System(su)->clear pki certificate This command will remove all certificate lists and all of their certificates. Do you want to continue (y/n) [n]?y 1 Certificate(s) cleared. System(su)->
This example shows how to clear the myTrustedOcspSigningCerts certificate list and all member certificates:
System(su)->clear pki certificate myTrustedOcspSigningCerts This command will remove certificate list "myTrustedOcspSigningCerts" and all of its certificates. Do you want to continue (y/n) [n]?y 1 Certificate(s) cleared. System(su)->