How about going to CLI and deleteing the RSA keys first with "crypto key zeroize rsa" from global configuration mode.
Also try the following commands in exec privileged mode:
"show crypto key mypubkey rsa"
"show crypto key pubkey-chain rsa"
You should see no entries after deleteing the rsa keys with the above command.
It looks like you were trying to generate self-signed certificates for IPSec VPN authentication, am I right?
I don't do much work with SDM though because you don't have much control over what commands SDM is going to deliver to the router config. Try using more CLI, you will aslo understand more.
If you want you can attach your config file so I could take a look.
Hope it helps.
Remi
