DataPower

DataPower

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

CLI Command to delete reference of crypto certificate from a crypto validation credential

  • 1.  CLI Command to delete reference of crypto certificate from a crypto validation credential

    Posted 05/04/21 02:30 PM

    i am trying delete reference of a crypto certificate object Certificate3 from a crypto validation credential object ValCredName via CLI command. But the command doesn't seem to be working. can someone help in correcting the mistake if any.

    # show valcred ValCredName

    valcred: ValCredName [up]

    -----------------------

    admin-state enabled

    certificate Certificate1 [up]

    certificate Certificate2 [up]

    certificate Certificate3 [up]

    cert-validation-mode legacy

    use-crl on

    require-crl off

    crldp ignore

    initial-policy-set 2.5.29.32.0

    explicit-policy off

    check-dates on

    # no certificate Certificate3

    Unknown command or macro (no certificate Certificate3)

    # show certificate Certificate3

    certificate: Certificate3 [up]

    ------------------------------------

    admin-state enabled

    file-name cert:///Certificate3.cer

    ignore-expiration on



    #DataPower
    #Support
    #SupportMigration


  • 2.  RE: CLI Command to delete reference of crypto certificate from a crypto validation credential
    Best Answer

    Posted 05/05/21 10:01 AM

    Hi,

    use the following commands: configure terminal -> crypto -> valcred ValCredName -> no certificate Certificate3

    --HP



    #DataPower
    #Support
    #SupportMigration


  • 3.  RE: CLI Command to delete reference of crypto certificate from a crypto validation credential
    Best Answer

    Posted 05/05/21 10:34 AM

    Thank you so much. I gave commands as below and it worked


    DPDevice:idg[domain]# co

    DPDevice:idg[domain]#(config)# crypto

    Crypto mode

    DPDevice:idg[domain]#(config-crypto)# valcred ValCredName

    Modify Crypto Validation Credentials configuration

    DPDevice:idg[domain]#(config valcred ValCredName)# no certificate Certificate1

    DPDevice:idg[domain]#(config valcred ValCredName)# exit

    DPDevice:idg[domain]#(config-crypto)# exit

    Exiting Crypto mode

    DPDevice:idg[domain]#(config)# write mem

    Overwrite previously saved configuration? Yes/No [y/n]: y

    Configuration saved successfully.



    #DataPower
    #Support
    #SupportMigration