Cisco Catalyst 2960 Series User Manual

DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode.enable
Example:
Device> enable
Step 1
•
Enter your password if prompted.
Enters global configuration mode.configure terminal
Example:
Device# configure terminal
Step 2
Deletes all Rivest, Shamir, and Adelman (RSA) keys from
your device.
crypto key zeroize rsa [key-pair-label]
Example:
Device(config)# crypto key zeroize rsa
Step 3
Exits global configuration mode and returns to privileged
EXEC mode.
end
Example:
Device(config)# end
Step 4
What to Do Next
After you delete RSA keys from the device, you should also complete the following two additional tasks:
•
Ask the CA administrator to revoke the device certificates at the CA; you must supply the challenge
password that you created when you originally obtained the device certificates with the crypto pki
enroll command.
•
Manually remove the device certificates from the device configuration.
Deleting Public Keys for a Peer
Under certain circumstances you may want to delete RSA public keys of peer devices from your device
configuration. For example, if you no longer trust the integrity of the public key of a peer, you should delete
the key.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
crypto key pubkey-chain rsa
4.
no named key key-name [encryption | signature]
5.
end
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1156
Monitoring and Maintaining Certification Authority

Cisco Catalyst 2960 Series Specifications

General

Layer	Layer 2
Power over Ethernet (PoE)	Available on some models
RAM	128 MB
Flash Memory	32 MB
MAC Address Table Size	8000
Operating Temperature	0°C to 45°C (32 to 113°F)
Ports	24 or 48 x 10/100/1000