Use the following command to delete a local certificate:
-
user@host> clear security pki local
certificate certificate-id (certificate-id | all | system-generated )
Specify a certificate ID to delete a local certificate with a specific ID, use all to delete all local certificates, or specify system-generated to delete the automatically generated self-signed certificate.
When you delete an automatically generated self-signed certificate, the device generates a new one.
To delete a CA certificate:
-
user@host> clear security pki ca-certificate
ca-profile (ca-profile-name | all)
Specify a CA profile to delete a specific CA certificate, or use all to delete all CA certificates present in the persistent store.
![]() |
Note: You are asked for confirmation before a CA certificate can be deleted. |