Allied Telesis AT-9400 Switch User Manual


 
Chapter 34: PKI Certificates and SSL
622 Section IX: Management Security
Deleting a Certificate
The procedure in this section deletes a certificate from the certificate
database. Please note the following before performing this procedure:
Deleting a certificate from the database does not delete it from the
switch. It continues to reside in the AT-S63 file system. To completely
remove a certificate from the switch, you must also delete it from the
file system. For instructions, refer to “Deleting a System File” on
page 158.
You cannot delete a certificate from the database if its corresponding
encryption key is the active key in the web server configuration. The
switch will consider the certificate as in use and will not allow you to
delete it. You must first configure the web server with another
encryption key pair for a different certificate. For instructions, refer to
“Configuring the Web Server” on page 590.
To delete a certificate from the certificate database, perform the following
procedure:
1. From the Main Menu, type 7 to select Security and Services.
2. From the Security and Services menu, type 7 to select Keys/
Certificates Configuration.
The Keys/Certificates Configuration menu is shown in Figure 221 on
page 596.
3. From the Keys/Certificate menu, type 3 to select Public Key
Infrastructure (PKI) Configuration.
The Public Key Infrastructure (PKI) Configuration menu is shown in
Figure 227 on page 613.
4. From the Public Key Infrastructure (PKI) Configuration menu, type 2 to
select X509 Certificate Management.
The X509 Certificate Management menu is shown in Figure 228 on
page 613.
5. From the X509 Certificate Management menu, type 3 to select Delete
Certificate.
The following prompt is displayed:
Enter certificate name (ALL - delete all) ->
6. Enter the name of the certificate you want to delete. (This field is case
sensitive.) To delete all the certificates, enter ALL.