cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1638
Views
0
Helpful
1
Replies

Is there a way to zeroize crypto keys and pki trustpoints without dropping ipsec connections?

Sean Franklin
Level 1
Level 1

I'm trying to get CCP working on my edge router. Easy to do if connecting unsecurely but due to our requirements that's not something that I can leave configured. So when trying to connect securely and attempting to discover the device I get a certificate rejected error. I see that the fix action is to zeroize the crytpo keys and delete the pki trustpoints. Is there any way to do this without dropping connections, or will this have to be an ASI?.. Thanks.                  

1 Reply 1

Rashid Thompson
Level 1
Level 1

If you just want to just delete a particular key, use the "label" parameter, with the name of the key in place of "WORD":

crypto key zeroize rsa label WORD

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: