cisco router identity certificate

[melvynbrown]

hi

just a quick question i have set up a small home lab to practice site to site vpn using routers as the vpn endpoints and using certificates for authentication what i would like to know is when identity cetificate is about to expire how do i delete it so i can replace with a new one from the CA

regards

melvyn

[Marvin Rhoads]

Generate a new certificate signing request (CSR) on the router. signin it with your CA and then enroll the new CA-generated certificate on your router. Make sure your VPN references that new certificate.

Intrructions for working with certificates can be found here (among other places).