deleting trustpoints from ssl accelerator

adamtroxel · ‎06-02-2008

How do I go about deleting trustpoints from my ssl accelerator?

no cry ca trustpoint <tpointname> is how I think it needs to be done.

Just as a quick question...

If I do this - it will not delete any other trustpoints, right? I have about 100 of them all with the same cert authority...

example

authority is geotrust.com

I have these trustpoints

a1

a2

a3

a4

If I give the command no cry ca trustpoint a3 it will delete a3

and leave

a1

a2

a4

correct?

Or is there a better way?

tstanik · ‎06-06-2008

Here is the command description which will help you :

To identify the trustpoints that will be used to validate a certificate during Internet Key Exchange (IKE) authentication, use the ca trust-point command in ISAKMP profile configuration mode.

To remove the trustpoint, use the no form of this command.

ca trust-point trustpoint-name

no ca trust-point trustpoint-name

Syntax Description

trustpoint-name : The trustpoint name as defined in the global configuration.