Users Guide

crypto cert delete
Deletes an installed host certificate and the private key created with it.
Syntax
crypto cert delete filename [fips]
Parameters
● filename — Enter the file name of the host certificate as displayed in the show crypto cert
command.
● fips — (Optional) Delete a FIPS-compliant certificate-key pair. To verify whether a certificate is
non-FIPS or FIPS-compliant., use the show crypto cert command.
Default Not configured
Command mode EXEC
Usage
information
When you delete the system's certificate, you also delete the private key. Do not delete a host certificate
that is used in a security profile. To display the currently installed host certificate and associated key, use
the show crypto cert command.
NOTE: A FIPS-compliant and non-FIPS certificate may have the same file name. To delete a FIPS-
compliant certificate, you must enter the fips parameter in the command.
Example
OS10# crypto cert delete Dell_host1_CA1.pem
Certificate and keys were successfully deleted. CN = Dell_host1_CA1
Supported
releases
10.4.3.0 or later
crypto cert generate
Creates a certificate signing request (CSR) or a self-signed certificate.
Syntax
crypto cert generate {request | self-signed} [cert-file cert-path key-file
{private | keypath}] [country 2-letter code] [state state] [locality city]
[organization organization-name] [orgunit unit-name] [cname common-name]
[email email-address] [validity days] [length length] [altname alt-name]
Parameters
● request — Create a certificate signing request to copy to a CA.
● self-signed — Create a self-signed certificate.
● cert-file cert-path — (Optional) Enter the local path where the self-signed certificate or CSR
is stored. You can enter a full path or a relative path; for example, flash://certs/s4810-001-
request.csr or usb://s4810-001.crt. If you do not enter the cert-file option, the system
interactively prompts you to fill in the remaining fields of the certificate signing request. Export the
CSR to a CA using the copy command.
● key-file {key-path | private} — Enter the local path where the downloaded or locally
generated private key is stored. If the key was downloaded to a remote server, enter the server path
using a secure method, such as HTTPS, SCP, or SFTP. Enter private to store the key in a local
hidden location.
● country 2-letter-code — (OPTIONAL) Enter the two-letter code that identifies the country.
● state state — Enter the name of the state.
● locality city — Enter the name of the city.
● organization organization-name — Enter the name of the organization.
● orgunit unit-name — Enter name of the unit.
● cname common-name — Enter the common name assigned to the certificate. Common name is the
main identity presented to connecting devices. By default, the switch’s host name is the common
name. You can configure a different common name for the switch; for example, an IP address. If the
Security
1181