clear pki certificate

Use this command to remove a single certificate from a list, an entire list of certificates, or to completely remove every certificate and list.

Syntax

clear pki certificate [pki-cert-list [fingerprint]] [no-confirm]

Parameters

pki-cert-list (Optional) Specify the certificate list to be cleared.
fingerprint (Optional) Specify a single certificate to clear using the certificate fingerprint.
no-confirm (Optional) Specify that no confirmation of the clear will take place.

Defaults

If no options are specified, all PKI certificates and certificate lists are deleted.

If fingerprint is not specified, all certificates for the specified certificate list are deleted and the certificate list is deleted.

If no-confirm is not specified, you will be asked to confirm the clear request before it takes place.

Mode

All command modes with admin privilege.

Usage

A certificate fingerprint is a Hex sequence used to authenticate or look up a longer public key. Fingerprints are created by applying a cryptographic hash function to the public portion of the certificate. Fingerprints simplify certificate management.

Examples

This example shows how to clear all certificates and certificate lists:

System(su)->clear pki certificate
This command will remove all certificate lists and all of their certificates.
Do you want to continue (y/n) [n]?y
1 Certificate(s) cleared.
System(su)->

This example shows how to clear the myTrustedOcspSigningCerts certificate list and all member certificates:

System(su)->clear pki certificate myTrustedOcspSigningCerts
This command will remove certificate list "myTrustedOcspSigningCerts" and all of its certificates.
Do you want to continue (y/n) [n]?y
1 Certificate(s) cleared.
System(su)->