Users Guide

Example
OS10# crypto cdp add Comsign http://fedir.comsign.co.il/crl/ComSignCA.crl
Supported
Releases
10.5.0 or later
crypto cdp delete
Deletes a certificate distribution point from the trust store on the switch.
Syntax
crypto cdp delete crl-filename
Parameters
● cdp-name — Enter a CDP name.
Default Not configured
Command Mode EXEC
Usage
Information
Before you delete a CDP, use the show crypto cdp command to display a list of all CDPs installed on
the switch.
Example
OS10# crypto cdp delete Comsign
Supported
Releases
10.5.0 or later
crypto cert delete
Deletes an installed host certificate and the private key created with it.
Syntax
crypto cert delete filename [fips]
Parameters
● filename — Enter the file name of the host certificate as displayed in the show crypto cert
command.
● fips — (Optional) Delete a FIPS-compliant certificate-key pair. To verify whether a certificate is
non-FIPS or FIPS-compliant., use the show crypto cert command.
Default Not configured
Command mode EXEC
Usage
information
When you delete the system's certificate, you also delete the private key. Do not delete a host certificate
that is used in a security profile. To display the currently installed host certificate and associated key, use
the show crypto cert command.
NOTE: A FIPS-compliant and non-FIPS certificate may have the same file name. To delete a FIPS-
compliant certificate, you must enter the fips parameter in the command.
Example
OS10# crypto cert delete Dell_host1_CA1.pem
Certificate and keys were successfully deleted. CN = Dell_host1_CA1
Supported
releases
10.4.3.0 or later
crypto cert generate
Creates a certificate signing request (CSR) or a self-signed certificate.
Syntax
crypto cert generate {request | self-signed} [cert-file cert-path key-file
{private | keypath}] [country 2-letter code] [state state] [locality city]
[organization organization-name] [orgunit unit-name] [cname common-name]
[email email-address] [validity days] [length length] [altname alt-name]
1380 Security